Offensive Security Engineer Jobs

About The Position

Requirements

• At least 3 years of hands-on experience in red teaming, penetration testing, or adversary simulation, including executing end-to-end attack campaigns.
• Experience with manual exploitation, attack chaining, and custom exploit, tooling, or payload development.
• Working knowledge of threat actor tactics, techniques, and procedures, and of identity, application, cloud, and hybrid enterprise attack surfaces.
• Experience bypassing layered security controls and detections, and documenting findings and remediation guidance for technical and executive audiences.

Nice To Haves

• Published security research, such as Common Vulnerabilities and Exposures credits, blog posts, or conference talks.
• Experience with assumed-breach or long-running adversary emulation campaigns and collaboration with Detection and Response or purple team functions.
• Malware analysis or exploit development background.
• Familiarity with cloud-native architectures and identity-centric security models.
• Offensive security certifications such as GXPN, OSCP, OSEP, OSWE, CRTO, or CRTL.

Responsibilities

• Design and run end-to-end red team operations that simulate real threat actors, from initial access to objective completion.
• Use threat intelligence to emulate specific Advanced Persistent Threat groups and adapt tactics as defenders respond.
• Find, exploit, and chain weaknesses across applications, identity, cloud, and enterprise environments.
• Build custom tooling, payloads, and techniques to test security controls and detections.
• Collaborate with the Red Team Director, Detection and Response, Detection Engineering, and Blue Teams on campaign design and purple team exercises.
• Help engineering teams understand root causes and implement durable fixes.
• Serve as the technical escalation point for complex attack paths and disputed findings, and mentor other engineers.
• Explain attack chains and business risks to executive leadership while following rules of engagement, scoping limits, and Operational Security practices.

Benefits

• Time off programs
• Medical insurance
• Dental insurance
• Vision insurance
• Mental health support
• Paid parental leave
• Life insurance
• Disability insurance
• 401(k)
• Employee stock purchasing program