Senior Security Engineer

Job Summary

Owning internal offensive testing, the full-time Senior Security Engineer will independently plan and execute penetration tests across applications, APIs, and cloud infrastructure while transitioning to continuous, AI-assisted testing in a remote environment.

Key responsibilities

• Independently plan and execute internal penetration tests, prioritizing assessments by risk and business impact
• Partner with engineering teams to explain findings, track remediation, and retest to confirm risk resolution
• Build testing tools and workflows that integrate hands-on assessments with ongoing automated testing and validation

Required qualifications

• 5+ years of relevant security engineering experience with substantial hands-on penetration testing
• Experience independently owning assessments and collaborating with engineering teams throughout the remediation process
• Strong understanding of application and API security, network security, and common vulnerability classes
• Ability to write production-quality code for security tools and navigate large, unfamiliar codebases
• Hands-on experience assessing cloud and infrastructure security, including identity and access controls