Senior Offensive Security Engineer

Mô tả công việc
Mức độ phù hợp và xếp hạng của bạn so với ứng viên khác như thế nào?
About the Role
In this role, you will leverage your offensive security and adversary emulation expertise to proactively identify and validate weaknesses across our applications, cloud infrastructure, and corporate environment before real attackers do. You will own the internal penetration testing and red team program, work closely with engineering teams to remediate findings, and partner with the security operations team to turn attack insights into stronger detections and defenses.
Responsibilities:
Plan and perform penetration tests on web applications, mobile applications (iOS/Android), APIs, and internal/external networks.
Assess the security of cloud environments (primarily GCP), Kubernetes workloads, CI/CD pipelines, and identity systems such as Azure AD / Entra ID.
Plan and run red team and adversary emulation exercises based on realistic threat scenarios and the MITRE ATT&CK framework, within agreed rules of engagement.
Work with the security operations team in purple team exercises to validate and improve detection coverage, alert quality, and incident response readiness.
Review the security of new features, system designs, and third-party integrations, and perform threat modeling with engineering teams.
Run the vulnerability management process for offensive findings: triage, risk rating, remediation guidance, and verification of fixes.
Coordinate and support external penetration tests and the bug bounty program, including scoping, triage, and validating reported issues.
Write scripts and internal tools to automate reconnaissance, attack surface monitoring, and repetitive testing tasks.
Write clear reports with risk ratings, proof-of-concept, and actionable remediation steps for both technical and non-technical stakeholders.