Senior Offensive Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior offensive security engineer testing First Advantage’s products, cloud infrastructure, networks, and people. Building adversary simulations and driving remediation to reduce enterprise risk.
Responsibilities:
- Plan, scope, and execute internal and external penetration tests across web and mobile applications, APIs, AWS/Azure cloud, networks, and infrastructure
- Design and run adversary emulation and red team engagements using multiple attack paths and objective-based goals
- Partner with Security Operations, Threat Intelligence & Hunt, Detection Engineering, Vulnerability Management, Application Security, DevOps, and Product teams on purple team exercises and remediation
- Identify, validate, and safely exploit vulnerabilities, including chaining lower-severity issues into high-impact attack paths
- Model threat actor tactics, techniques, and procedures using the MITRE ATT&CK framework
- Review findings, prioritize exploitability and business risk, create remediation tickets, drive fixes, and coordinate retests
- Build and maintain custom scripts, tooling, and automation for scalable offensive testing
- Help operationalize continuous/autonomous testing platforms
- Produce decision-ready reports and executive summaries translating technical findings into business impact
- Support incident response and threat hunting with offensive expertise, attack-path context, and adversary insight
- Develop repeatable methodologies, playbooks, and metrics to mature the offensive security program
Requirements:
- 5+ years of hands-on experience in offensive security, penetration testing, red teaming, or a closely related security engineering role
- Demonstrated expertise across web/mobile application, API, network, infrastructure, and cloud (AWS and/or Azure) penetration testing
- Strong understanding of exploitation and post-exploitation techniques, attack-path chaining, and objective-based adversary emulation
- Proficiency with Burp Suite Professional, Nmap, Metasploit, Kali Linux, and vulnerability scanners
- Proficiency in at least one scripting or programming language, such as Python, Go, PowerShell, Ruby, or Bash
- Working knowledge of the MITRE ATT&CK framework and hands-on experience mapping engagements to adversary TTPs
- Excellent written and verbal communication skills, with the ability to present findings to technical audiences and executive leadership
- Advanced offensive certifications such as OSEP, OSCE³, CRTO, or GXPN are an advantage
- Track record of original security research, CVEs, or responsible disclosures is an advantage
- Experience with cloud-native attack techniques and container/Kubernetes (EKS/AKS) and serverless security testing is an advantage
- Experience operating or evaluating continuous/autonomous penetration testing and breach-and-attack-simulation platforms is an advantage
- Familiarity with detection engineering, SIEM/EDR platforms, and building purple team feedback loops into SOC content is an advantage
- Knowledge of relevant compliance and security frameworks is an advantage
- Experience mentoring junior engineers and helping mature an offensive security program is an advantage
Benefits:
- Employee Impact Groups
- FA Cares volunteer opportunities
- Mentorship Advantage Program
- SOAR, award-winning manager development program
- Culture programs and benefits designed to enhance employee experience and development
Similar Jobs
Senior Digital Forensics and Incident Response Engineer
Senior DFIR Engineer leading identity-theft investigations and automation for Humana, a U.S. healthcare and insurance company. Supporting enterprise cyber investigations, incident response, and forensic capability development.
Security Engineer
Security Engineer securing PIP Labs’ DATA Network infrastructure, cloud environment, endpoints, and internal systems. Automating security operations and protecting sensitive real-world data used for AI training.
Senior macOS Engineer – Workforce AI Security
Senior macOS Engineer owning native endpoint security agents for Check Point’s enterprise AI platform. Building TLS interception, proxy controls, and data-loss protections across managed Macs.
IT/OT Security Architect
IT/OT Security Architect designing secure IT, OT, cloud, and AI architectures for Berlin-based cybersecurity consultancy APT-ONE. Translating regulatory requirements into controls and advising CISOs and technical leaders.
Security Captain – Rotational
Security Captain supervising personnel and protective operations at NMS’s remote Alpine oil field. Managing incidents, emergency response, client coordination, and rotational camp operations.
Senior Security Engineer, Threat & Offensive Security
Senior Security Engineer strengthening offensive security and threat operations. Protecting Valon’s AI-native mortgage servicing platform for regulated finance.
Global Security Architect
Security Architect designing Microsoft 365, Azure, and hybrid security architectures for base-IT’s SME and enterprise customers. Leading security roadmaps, workshops, migrations, and technical standards.
Workday Security Developer
Workday Security Developer building complex enterprise applications and integrations for Carilion Clinic. Leading architecture, troubleshooting, technical standards, and large-scale healthcare technology initiatives.
Specialised Sales, OT Security
OT Security Sales Specialist developing tailored B2B cybersecurity solutions for Swisscom clients. Driving technical sales, new business, upselling, and cross-selling across industrial sectors.
Information Security Consultant
Information Security Consultant advising German cloud, AI, and data-center companies on ISMS and compliance. Delivering audit-ready policies, gap analyses, and practical security solutions.
Senior Information Security Manager
Senior Information Security Manager leading security operations, incident response, and AI governance. Protecting 8am’s payments and workflow platform serving 250,000 U.S. professionals.
Information Security Engineer
Information Security Engineer securing 8am’s cloud, detection, and compliance systems. Protecting fintech software used by over 250,000 U.S. professionals.
Cybersecurity Vulnerability Management Lead
Cybersecurity Vulnerability Management Lead modernizing the NSF Cybersecurity Program for Cherokee Federal. Leading exposure management, prioritization, automation, and enterprise risk reduction.
Senior Director, Information Security and Compliance
Senior security leader advancing Foundant’s SaaS information security and GRC programs. Protecting mission-critical software serving foundations, nonprofits, and community organizations worldwide.
Security Engineer – GRC
Security Engineer owning governance, risk, and compliance for Alan’s health insurance and prevention platform. Managing ISO 27001, DORA, HDS, audits, risk, and security automation.
Associate Security Architect
Associate Security Architect detecting and mitigating cyberattacks for Akamai's managed security customers. Protecting digital properties through Akamai's distributed cloud, edge, and security platform.
Cloud Security Engineer
Cloud Security Engineer securing Azure infrastructure, identities, and AI workloads for a global IT transformation leader. Driving remediation, policy-as-code guardrails, and Microsoft Defender for Cloud posture improvement.
Portuguese Speaking Cybersecurity Customer Expert
Cybersecurity customer experts supporting Portuguese-speaking clients with security software and incident inquiries. Mercier Consultancy Group provides recruitment and BPO services across Europe.
Senior Cybersecurity Financial Compliance SME
Senior cybersecurity compliance SME ensuring DoW and Army audit readiness for ASRC Federal’s Vantage system. Applying NIST controls, FIAR requirements, and financial management overlays.
Security Architect
Arquiteto de Segurança da Informação na Verity, consultoria de transformação e engenharia digital. Projetando controles, riscos e práticas DevSecOps para ambientes Cloud e on-premises.