Senior Offensive Security Engineer

New

DelineaCybersecurity

U.S. Remote; based in the United StatesFull-TimeSenior

Salary$150K - $175K; $150K – $175K • Offers Equity • Offers Bonus; Estimated Base Salary $150K – $175K • Offers Equity • Offers Bonus

Apply NowOpens the employer's application page

Job Details

Hold a bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related technical field, or have equivalent work experience.
Have at least 3 years of hands-on internal and external web application, API, and network penetration testing experience.
Have experience writing formal penetration test reports documenting test details, vulnerabilities, and risks.
Understand penetration testing methodology and frameworks, including MITRE ATT&CK, OWASP, and PTES.
Understand the OWASP Top 10 and OWASP API Security Top 10.
Have hands-on experience with offensive security tools such as Burp Suite, Nmap, Metasploit, BloodHound, and Impacket.
Have experience testing identity and authentication mechanisms, including Active Directory, Entra ID, Kerberos, OAuth 2.0, OpenID Connect, and SAML.
Be proficient in at least one scripting or programming language, such as Python, Go, or PowerShell.
Be able to read and review source code in languages such as C#, Java, or JavaScript/TypeScript to identify vulnerabilities.
Have experience with Azure and AWS cloud-based infrastructure.
Understand the Secure Software Development Lifecycle (SSDLC).
Be able to explain vulnerabilities and proof-of-concept demonstrations to audiences with limited security expertise.
Be able to manage multiple engagements concurrently and meet deadlines with minimal supervision.

Lead red and purple team operations that emulate real-world adversary TTPs against enterprise and product security controls.
Lead internal and external network and infrastructure penetration tests, including in Azure and AWS environments.
Identify and exploit attack paths in identity infrastructure, including Active Directory, Entra ID, Kerberos, credentials, and secrets.
Review source code to support testing engagements and execute targeted attacks.
Create or reproduce proof-of-concept exploits for findings and externally reported vulnerabilities.
Plan and execute penetration testing engagements, including scoping, rules of engagement, testing, documentation, reporting, and remediation validation.
Perform manual and automated testing of web applications, APIs, desktop and agent-based clients, and cloud services.
Write penetration test reports with reproduction steps, risk ratings, business impact, and actionable remediation guidance.
Partner with Product Development, DevOps, and IT to explain findings, support root cause analysis, and validate remediation.
Develop testing tools, scripts, automation, methodologies, playbooks, and testing environments.

View Full Description & ApplyYou'll be redirected to the employer's site