Senior Offensive Security Engineer

Job Summary

Seeking a hands-on Senior Offensive Security Engineer, the full-time remote position will lead penetration testing and red team operations across cloud, endpoint, application, and API environments while managing a private bug bounty program and collaborating with development teams to enhance security practices.

Key responsibilities:

• Plan, scope, execute, and report on penetration tests across various environments, providing prioritized remediation guidance
• Lead quarterly red and purple team operations to simulate real-world adversary tactics and test organizational resilience
• Manage the private bug bounty program, including strategy, vulnerability triage, and coordination of remediation efforts

Required qualifications:

• 8+ years of hands-on experience in penetration testing, red teaming, or equivalent offensive security roles
• Demonstrated experience performing penetration tests against cloud environments (Azure, AWS, GCP), endpoints, and APIs
• Experience conducting full-scope red team operations and purple team exercises
• Strong background in vulnerability triage and risk prioritization with development and security teams
• Experience managing or significantly contributing to a bug bounty program