Summary
What you’ll impact
The Lead Offensive Security Engineer plans and leads red‑team exercises and adversarial simulations across applications, infrastructure, and physical environments. They develop testing tools in Python, Go, and JavaScript and use CI pipelines, Kubernetes/Docker, and cloud platforms like AWS and GCP. Responsibilities include threat modeling, penetration testing, automating security assessments, and delivering remediation guidance to engineering teams. They collaborate with detection teams, mentor junior engineers, and lead incident response and risk prioritization.
Responsibilities
What you'll do
- Evangelize the Offensive Security Team’s Findings and Projects with stakeholders throughout the organization and collaborate with other teams to create solutions that balance security with other priorities.
- Mentor and provide guidance to the members of the Offensive Security team.
- Plan and execute red team exercises, including long-term assessments that simulate real‑world attack scenarios.
- Perform threat modeling and penetration testing across applications, infrastructure, and corporate environments.
- Develop scripts and tools to support and automate security testing activities.
- Partner with detection and response teams to run adversarial simulations and improve incident readiness.
- Communicate findings clearly and work with engineering teams to remediate identified risks.
- Lead security incidents when pentest or red team findings require them.
- Plan and participate in adversarial simulation exercises with various security teams.
Requirements
What you’ll bring
- 8+ years of experience conducting red team operations or advanced penetration testing
- Experience mentoring or supporting the development of other security engineers
- Passion and demonstrated experience for challenging security assumptions.
- Excellent written and verbal communication skills and ability to communicate findings at many different levels of abstraction from engineers to executives.
- Passion for fixing security issues and not just identifying security issues.
- Familiarity with common network protocols and standards such as DNS and TCP/IP.
- Experience with macOS and Linux.
- Experience leveraging components of a modern software development stack to attack organizations, including CI, container orchestration systems (Kubernetes/Docker), cloud providers (AWS, GCP), etc., and providing hardening suggestions.
- Experience/knowledge of defensive tools/techniques (IDS/IPS, packet capture, network analysis, AV, EDR, etc.) and how to evade them.
- Deep understanding of MITRE ATT&CK Framework.
- Strong understanding of security fundamentals of access and identity.
- Comfortable reading/writing Python, Go, and JavaScript.
- Ability to research and execute a testing plan to assess a new technology or process.
- Demonstrated experience working with a distributed team.
- Proficiency to communicate over text‑based mediums (Slack, JIRA, GitHub issues, email) and succinctly document technical details.