Senior Security Engineer – Red Team
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Red-team security engineer conducting penetration tests and threat research for Insider One’s AI-powered marketing and customer engagement platform. Supporting secure development across agile teams.
Responsibilities:
- Perform web, mobile application, and internal penetration tests
- Conduct source-code reviews, threat analysis, and social-engineering assessments
- Support blue teams when needed
- Research new attack vectors and stay current with cybersecurity news and trends
- Train Quality Assurance and Development teams in security testing techniques and secure software development
- Support developers in business units throughout the SDLC
- Provide guidance on mitigations for emerging threats
- Review application source code using static application security testing tools
- Conduct security research on vulnerabilities and testing tools
- Create detailed documentation and reports communicating vulnerabilities, mitigation strategies, and remediation steps
- Execute white-, gray-, or black-box security posture assessments
- Collaborate with agile teams and other departments
Requirements:
- 4+ years of working experience in web application security
- Hands-on experience testing web applications, web services, mobile applications, and APIs
- Experience securing REST APIs and web services
- Experience using and implementing SAST/DAST tools such as Fortify, Veracode, or Checkmarx
- Knowledge of penetration testing information systems using commercial and open-source exploitation tools
- Understanding of standard security vulnerabilities and remediation based on OWASP, SANS, and similar standards
- Experience with secure coding methodologies and implementation within engineering teams
- Ability to support developers throughout the SDLC and guide mitigations for emerging threats
- Experience reviewing application source code using static application security testing tools
- Security research experience involving vulnerabilities and testing tools
- Ability to create detailed vulnerability, mitigation, and remediation reports
- Ability to work on multiple projects concurrently
- Strong written and verbal communication skills in English
- Python, JavaScript, or PHP programming experience is a plus
- Scripting and automation-script experience for application security testing is a plus
- Familiarity with cloud security, particularly AWS security concepts, is a plus
- Certifications such as eWAPTx, OSCP, or OSWE are a plus
- Ability to work in a team-centric environment
- Strong critical-thinking and analytical skills
- Experience executing white-, gray-, or black-box security posture assessments and producing detailed reports
Benefits:
- Monthly meal allowance
- Comprehensive private health insurance
- Access to Spotify, LinkedIn Learning, Blinkist, MasterClass, Neoskola, and CloudGuru
- Internal training covering AI fundamentals, coding, foreign languages, and personal development skills
- Diverse global team environment
- Eligibility-based ESOP/share ownership
- Referral bonuses
- Volunteering and purpose-driven social impact projects
- Global retreats and team-building activities
- Tech & Dev Talks and industry events
- Fully remote work from anywhere in Turkey
Similar Jobs
Senior Security Engineer
Senior Security Engineer securing ICT processes and assets at XTB, a global online financial trading company. Managing incidents, vulnerabilities, security tools, threat modeling, and cybersecurity training.
Group IT Security Manager
Group IT Security Manager securing Bolton’s global FMCG technology infrastructure. Leading Zero Trust, SOC effectiveness, incident response and security architecture initiatives from Milan.
Enterprise AI Security Engineer
Enterprise AI Security Engineer building guardrails, detections, and telemetry for Lilly’s enterprise AI systems. Integrating AI security controls across cloud, identity, endpoint, and operations platforms.
Enterprise AI Security Advisor
Enterprise AI Security Advisor securing agents, models, and AI infrastructure for Lilly’s global pharmaceutical business. Setting enterprise controls, testing standards, and security strategy.
Senior Security Advisor – Lead Control Assessor
Senior Security Advisor leading NIST 800-53 cybersecurity control assessments for Soteria’s clients. Coordinating assessors, validating evidence, and presenting findings to executives and boards.
Senior Zscaler Security Engineer
Senior Zscaler Security Engineer operating and expanding Zscaler Zero Trust environments for federal agencies. Integrating security, identity, monitoring, and service-management platforms.
Senior Staff AI Security Lead
Senior Staff AI Security Lead building secure LLM infrastructure and driving AI adoption across IonQ’s quantum computing security organization. Delivering production AI systems, governance, and measurable analyst productivity gains.
Senior Product Security Engineer
Product Security Engineer securing Close’s AI-powered CRM across applications, APIs, cloud infrastructure, and integrations. Building vulnerability management, security automation, and incident-response capabilities.
Principal Linux Security Engineer
Principal Linux Security Engineer securing CIQ’s enterprise Linux distributions and infrastructure. Building compliance profiles, security tooling, errata, and CVE assessments for demanding workloads.
Information Security and Governance Analyst, Mid-Level
Analista de Governança e Segurança da Informação apoiando auditorias, riscos e controles na Monkey. Empresa de tecnologia financeira que simplifica transações entre grandes empresas e fornecedores.
Security Engineer IV
Security Engineer IV leading AI/LLM security, cloud controls, compliance, and incident investigations. Rackspace Technology operates enterprise AI infrastructure for regulated and mission-critical customers.
Regional Sales Director, Identity Security
Regional Sales Director leading Mid-Atlantic and TOLA sales teams for Cyera’s AI security platform. Driving territory growth, enterprise deals, coaching, and quota achievement.
Security Engineer
Security Engineer operating Firmable’s SOC 2 and ISO 27001 security controls. Managing AWS cloud security, vulnerabilities, access, monitoring, audits and incident response remotely.
AVP, Cyber Application Security Architect
Cyber application security architect securing SaaS, cloud infrastructure, and software development lifecycles. Driving secure-by-design reviews, DevSecOps, threat modeling, and AI/ML security guidance.
Senior Cybersecurity Disaster Recovery, Contingency Planning SME
Cybersecurity DRCP SME leading nationwide BIA, DRP, and contingency planning programs. Supporting government agencies in strengthening national security and improving public services.
Cloud Specialist – Security SSR
Cloud Security Specialist securing AWS infrastructure for major Latin American companies. Designing AWS governance, network protection, compliance, automation, and incident remediation.
Senior Cybersecurity Architect
Senior Cybersecurity Architect governing Zero Trust, AWS, DevSecOps, and AI security architecture. Reducing cyber risk across HomeServe’s home-services technology and integrations.
Senior Cybersecurity Engineer
Senior Cybersecurity Engineer securing HomeServe’s enterprise systems, infrastructure, and business operations. Leading risk assessments, security architecture, incident response, compliance, and cybersecurity innovation.
AWS Cloud Security Engineer
AWS Cloud Security Engineer securing Peraton’s FedRAMP-authorized AWS infrastructure. Implementing cloud controls, continuous compliance, and ATO support for national security missions.
Security Engineer – CrowdStrike Falcon
Senior CrowdStrike CNAPP engineer configuring cloud, Kubernetes, and container security for a cybersecurity consulting firm. Securing government and enterprise environments through hands-on Falcon implementation.