Senior Security Engineer, Threat & Offensive Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Engineer strengthening offensive security and threat operations. Protecting Valon’s AI-native mortgage servicing platform for regulated finance.
Responsibilities:
- Drive and conduct security testing and penetration tests across applications, infrastructure, and networks to identify exploitable vulnerabilities
- Manage and implement security testing tools and frameworks to simulate real-world attacks and validate security controls
- Design and implement AI-enabled workflows to scale security testing and threat-related operations
- Manage and operationalize threat intelligence to anticipate emerging threats and adjust defenses proactively
- Partner with external pentesting firms for periodic independent reviews
- Perform security reviews of new systems, features, architectures, and third-party integrations, providing actionable risk-based recommendations
- Collaborate with Engineering, IT, Product, and other teams to remediate vulnerabilities and strengthen security controls
- Develop and refine playbooks, procedures, and standards for offensive security testing, threat monitoring, and incident response
- Monitor and manage security alerts and incidents, analyze data, and respond to security events
- Support general security reviews, security monitoring, vendor security, issue remediation, security awareness, audit/compliance, and other security processes
Requirements:
- Minimum of 5 years in a security engineering, penetration testing, threat intelligence, or similar role with relevant responsibilities and background
- Bachelor's degree in Computer Science, Information Security, Technology, or a related field
- Relevant security certifications (e.g., CISSP, CEH, OSCP, GPEN, GCIH or similar)
- Knowledge of cloud environments
- Experience with security testing, monitoring, and response technologies (threat intelligence platforms, vulnerability scanners, SIEM, EDR, or similar)
- Hands-on experience with security testing tools and frameworks such as Burp Suite, Metasploit, Nmap, Cobalt Strike, or similar
- Demonstrated experience leveraging AI and automation to improve threat detection, testing, and response operations
- Proficiency in manual and automated testing techniques
- Strong understanding of common attack techniques, exploitation methods, and MITRE ATT&CK or related frameworks
- Experience with SIEM, EDR, and other detection/monitoring platforms
- Experience with cloud security and environments including GCP and AWS
- Applied knowledge of OWASP, NIST, MITRE ATT&CK, CIS, SOC 2/ISO 27001 concepts
- Ability to work autonomously, lead projects, and navigate complex, ambiguous security investigations
- Excellent communication and collaboration skills, including explaining technical findings and risk to technical and non-technical stakeholders
- Experience or exposure to startup environments is a plus
Benefits:
- Competitive salary with a meaningful stake in the company via equity
- 401k plan
- Comprehensive medical, dental, & vision benefits
- Pre-tax commuter benefits for public transportation, rideshare services, and parking expenses
- Company-wide orientation and learning & development opportunities
- Regular review cycles featuring 360 degree feedback
- Quarterly budgets for team and company outings
- Flexible paid time off
- Sick days
- 11 company holidays
- 12 weeks fully paid baby bonding time for birthing and non-birthing parents
Similar Jobs
Global Security Architect
Security Architect designing Microsoft 365, Azure, and hybrid security architectures for base-IT’s SME and enterprise customers. Leading security roadmaps, workshops, migrations, and technical standards.
Workday Security Developer
Workday Security Developer building complex enterprise applications and integrations for Carilion Clinic. Leading architecture, troubleshooting, technical standards, and large-scale healthcare technology initiatives.
Specialised Sales, OT Security
OT Security Sales Specialist developing tailored B2B cybersecurity solutions for Swisscom clients. Driving technical sales, new business, upselling, and cross-selling across industrial sectors.
Information Security Consultant
Information Security Consultant advising German cloud, AI, and data-center companies on ISMS and compliance. Delivering audit-ready policies, gap analyses, and practical security solutions.
Senior Information Security Manager
Senior Information Security Manager leading security operations, incident response, and AI governance. Protecting 8am’s payments and workflow platform serving 250,000 U.S. professionals.
Information Security Engineer
Information Security Engineer securing 8am’s cloud, detection, and compliance systems. Protecting fintech software used by over 250,000 U.S. professionals.
Cybersecurity Vulnerability Management Lead
Cybersecurity Vulnerability Management Lead modernizing the NSF Cybersecurity Program for Cherokee Federal. Leading exposure management, prioritization, automation, and enterprise risk reduction.
Senior Director, Information Security and Compliance
Senior security leader advancing Foundant’s SaaS information security and GRC programs. Protecting mission-critical software serving foundations, nonprofits, and community organizations worldwide.
Security Engineer – GRC
Security Engineer owning governance, risk, and compliance for Alan’s health insurance and prevention platform. Managing ISO 27001, DORA, HDS, audits, risk, and security automation.
Associate Security Architect
Associate Security Architect detecting and mitigating cyberattacks for Akamai's managed security customers. Protecting digital properties through Akamai's distributed cloud, edge, and security platform.
Cloud Security Engineer
Cloud Security Engineer securing Azure infrastructure, identities, and AI workloads for a global IT transformation leader. Driving remediation, policy-as-code guardrails, and Microsoft Defender for Cloud posture improvement.
Portuguese Speaking Cybersecurity Customer Expert
Cybersecurity customer experts supporting Portuguese-speaking clients with security software and incident inquiries. Mercier Consultancy Group provides recruitment and BPO services across Europe.
Senior Cybersecurity Financial Compliance SME
Senior cybersecurity compliance SME ensuring DoW and Army audit readiness for ASRC Federal’s Vantage system. Applying NIST controls, FIAR requirements, and financial management overlays.
Security Architect
Arquiteto de Segurança da Informação na Verity, consultoria de transformação e engenharia digital. Projetando controles, riscos e práticas DevSecOps para ambientes Cloud e on-premises.
Security System Analyst – Lenel, Milestone
Security Systems Analyst supporting Lenel OnGuard and Milestone physical security systems for Securitas UK. Owning incident resolution, troubleshooting faults, and coordinating third-party engineers.
Signalling Security Specialist
Telecom signalling security specialist auditing telecom networks with PTA and supporting PTM IDS deployments. Delivering customer reports, presentations, troubleshooting, and operational improvements.
Cybersecurity Engineer
Cybersecurity Engineer automating cybersecurity operations, scripting, and API integrations for The Home Depot. Troubleshooting incidents and strengthening threat defense and access management.
Transit Safety Security Specialist
Transit safety specialist leading U.S. infrastructure safety, security, and certification projects for AECOM. Developing risk analyses, PTASPs, compliance documentation, and client training.
Manager, Cyber Security
Cyber Security Manager leading incident response, detection engineering, and security operations. Protecting Ping Identity’s cloud identity platform and enterprise systems.
Senior Domain Consultant – AI Security
AI Security Domain Consultant securing enterprise AI agents, applications, data, and supply chains. Leading customer PoVs, executive demos, architectures, and Prisma AIRS roadmap feedback.