Sr Offensive Security Engineer

Accountabilities:

• Plan, scope, and execute penetration tests across web and mobile applications, APIs, cloud environments, networks, and infrastructure using realistic attacker methodologies.
• Design and conduct red team, purple team, and adversary emulation exercises that combine multiple attack paths to achieve defined objectives and evaluate organizational resilience.
• Identify, validate, and safely exploit vulnerabilities, including chaining lower-severity weaknesses into higher-impact attack paths within controlled, production-representative environments.
• Model real-world threat actor tactics, techniques, and procedures using the MITRE ATT&CK framework to assess and strengthen detection and response capabilities.
• Review security findings for accuracy, assess exploitability and business impact, prioritize remediation, create actionable tickets, and work with engineering teams through remediation and retesting.
• Develop and maintain custom scripts, offensive security tooling, and automation to scale penetration testing and support continuous or autonomous security testing capabilities.
• Produce clear, decision-ready technical reports and executive summaries that translate vulnerabilities and attack paths into measurable business and security risk.
• Support incident response and threat hunting activities by providing offensive security expertise, adversary context, and attack-path analysis.
• Partner with security, engineering, DevOps, product, and infrastructure teams to turn offensive findings into practical, prioritized security improvements.
• Contribute to the maturity of the offensive security program by developing repeatable methodologies, playbooks, metrics, and continuous improvement initiatives.

Requirements:

• 5+ years of hands-on experience in offensive security, penetration testing, red teaming, or a closely related security engineering role.
• Demonstrated expertise across multiple security domains, including web and mobile applications, APIs, networks, infrastructure, and cloud platforms such as AWS and/or Azure.
• Strong understanding of exploitation, post-exploitation, attack-path chaining, privilege escalation, and objective-based adversary emulation.
• Proficiency with industry-standard offensive security tools such as Burp Suite Professional, Nmap, Metasploit, Kali Linux, and vulnerability scanning platforms.
• Strong scripting or programming skills in at least one language such as Python, Go, PowerShell, Ruby, or Bash, with the ability to develop custom tools and automation.
• Practical knowledge of the MITRE ATT&CK framework and experience mapping offensive engagements to adversary tactics, techniques, and procedures.
• Strong understanding of cloud-native attack techniques, with experience testing containerized or Kubernetes environments and serverless platforms preferred.
• Familiarity with detection engineering, SIEM and EDR technologies, and purple team feedback loops is highly valuable.
• Experience evaluating or operating continuous penetration testing and breach-and-attack-simulation platforms is advantageous.
• Knowledge of relevant cybersecurity, compliance, and security frameworks.
• Strong written and verbal communication skills, with the ability to explain complex vulnerabilities, attack scenarios, and business impact to both technical stakeholders and executive leadership.
• Advanced offensive security certifications such as OSEP, OSCE³, CRTO, or GXPN are preferred.
• A track record of original security research, CVEs, responsible disclosures, or other demonstrable security research is a plus.
• Experience mentoring junior security engineers and helping develop or mature an offensive security program is advantageous.

Benefits:

• Full-time opportunity based in India with a remote work environment.
• Competitive benefits package, including medical and dental coverage, subject to applicable eligibility requirements.
• Generous paid time off program.
• Volunteer Time Off opportunities supporting community and philanthropic initiatives.
• Global Employee Assistance Program focused on employee well-being.
• Professional development opportunities, including structured learning and career-development programs.
• Mentorship opportunities designed to support professional growth and knowledge sharing.
• Access to employee impact groups and initiatives that foster inclusion, collaboration, and connection.
• Opportunities to work on sophisticated offensive security challenges across cloud, application, infrastructure, and enterprise environments.
• Supportive, collaborative culture focused on innovation, continuous learning, teamwork, and meaningful security impact.
• Equal opportunity workplace committed to fair employment practices and a recruitment process free from discrimination, harassment, and retaliation.