Principal Offensive Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead risk-focused penetration testing and offensive security evaluations across various products, web applications, APIs, infrastructure, cloud services, identity systems, SaaS, and enterprise technologies.

• Identify, validate, and safely exploit vulnerabilities while demonstrating realistic attack paths.

• Scope, design, and implement red-team campaigns and adversary simulations tailored to relevant threats, emerging techniques, and business risks.

• Develop and assess AI-assisted workflows for reconnaissance, campaign development, social engineering, tooling, and analysis.

• Create custom scripts, tools, payloads, and automation for offensive security initiatives.

• Conduct offensive security and red-team evaluations primarily within GCP and modern identity platforms, including AWS, Azure, and Kubernetes as relevant.

• Plan and carry out purple-team exercises in collaboration with SOC, Detection Engineering, Threat Hunting, and Incident Response teams.

• Validate telemetry, detections, investigation workflows, response capabilities, logging, monitoring, playbooks, and defensive controls.

• Collaborate with engineering and defensive teams to prioritize remediation, retest solutions, and confirm enhancements.

• Document findings, attack paths, business impacts, and suggested remediation for both technical and executive audiences.

• Take ownership of the technical direction and execution of the offensive security roadmap.

• Enhance testing methodologies and mentor offensive security practitioners through hands-on collaboration.

• Assess program effectiveness through verified remediation, decreased exposure to critical attack paths, and repeatable validation of detection and response coverage.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent experience.

• Over 8 years of relevant information security experience, including substantial hands-on expertise in penetration testing, red teaming, adversary simulation, or offensive security.

• Proven experience leading complex penetration tests or offensive security engagements independently.

• In-depth hands-on knowledge in application/API exploitation, cloud offensive security, identity systems, or enterprise environments.

• Practical understanding of offensive security domains and the ability to link weaknesses into realistic attack paths while assessing business impacts.

• Strong knowledge of attacker techniques encompassing initial access, credential access, privilege escalation, persistence, lateral movement, defense evasion, and data access.

• Hands-on offensive security experience in at least one major cloud platform (GCP, AWS, or Azure) and modern identity environments.

• Familiarity with Active Directory, SAML, OAuth, OIDC, MFA, and SSO.

• Experience with contemporary offensive security tools and frameworks across web, identity, network, and adversary-emulation testing.

• Capability to develop or modify offensive security tools using Python, PowerShell, Bash, Go, or similar programming languages.

• Hands-on experience incorporating AI into offensive security or red-team operations, with specific examples of workflows, tools developed or adapted, validation, and operational advantages.

• Experience in planning or leading purple-team exercises and translating offensive findings into defensive enhancements.

• Strong understanding of MITRE ATT&CK, with the ability to map offensive activities to adversary techniques and defensive coverage.

• Excellent written and verbal communication skills, including the ability to articulate technical risks to engineering teams, security leadership, and executives.

• Experience mentoring offensive security engineers, setting technical direction, and influencing outcomes across engineering and security teams.

• Ability to comply with U.S. export controls.

• Preferred: contributions to the offensive security or AI security community.

• Preferred: experience in building or enhancing an internal red-team or offensive security program.

• Preferred: advanced adversary-emulation or assumed-breach exercises.

• Preferred: AI integrations utilizing agent frameworks, LLM APIs, or local or hosted models.

• Preferred: assessment of AI-enabled applications, LLM-integrated systems, or agentic workflows.

• Preferred: experience in SaaS security, endpoint/EDR evasion, exploit development, or social engineering.

• Preferred: repeatable purple-team validation programs.

• Preferred: strong practical offensive security experience in GCP and Kubernetes assessments.

• Preferred: OSCP, OSEP, OSWE, OSED, CRTO, GXPN, or comparable certifications.

🏝️ Benefits

• Bonus or commission eligibility.

• Medical benefits.

• Retirement benefits.

• Financial benefits.

• Wellness benefits.

• Paid time off.

• Employee discounts.

• A diverse, equitable, and inclusive workplace.

• Support for a growth mindset throughout all career stages.