Offensive Security Engineer

Overview

Job Description

Responsibilities

• - Conduct comprehensive penetration tests across web applications, APIs, cloud environments (AWS/GCP/Azure), mobile applications, and internal infrastructure
• - Plan and execute red team engagements that emulate the TTPs of cyber and criminal threat actors targeting financial services
• - Perform assumed-breach and objective-based assessments to test detection and response capabilities in coordination with defensive teams
• - Partner with detection engineering, threat intelligence, and incident response teams to validate security controls
• - Contribute adversary tradecraft insights to inform detection rule development
• - Support incident investigations by providing offensive expertise
• - Design, develop, and maintain custom offensive tools, scripts, and automation frameworks
• - Build internal platforms and workflows that enable scalable, repeatable offensive operations
• - Produce clear, actionable reports that communicate technical findings
• - Act as a subject-matter expert and primary point of contact for stakeholder teams engaged in offensive security programs
• - Lead offensive security projects end-to-end, mentor junior team members

Required Skills

• - 5+ years of experience in offensive security, penetration testing, red teaming, or a related field
• - Strong programming skills in Python, Go, or similar languages
• - Deep knowledge of web application security, including OWASP Top 10
• - Hands-on experience with cloud platforms (AWS, Azure, or GCP)
• - Proficiency with offensive tooling such as Burp Suite, Cobalt Strike, Mythic, Sliver
• - Familiarity with adversary tradecraft and frameworks such as MITRE ATT&CK
• - Excellent written and verbal communication skills
• - Ability to think like an adversary

Benefits

• - Equity
• - Company bonus or sales commissions/bonuses
• - Retirement plans
• - Health benefits
• - Wellness stipends