Senior Security Engineer, Offensive Security

Vaga não está no LinkedIn

🔥 21 horas atrás

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $184.000 - $220.000 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Liftoff Mobile

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

Fundada em 2012

📣 Marketing

Marketing • Advertising • Mobile

A Liftoff Mobile é uma plataforma líder projetada para potencializar a publicidade mobile e o crescimento de negócios. A empresa é especializada em aplicar soluções avançadas de machine learning por meio de sua plataforma Cortex para aprimorar estratégias de aquisição de usuários, engajamento e monetização no ecossistema mobile. Os serviços da Liftoff atendem a profissionais de marketing, desenvolvedores de jogos mobile e agências, oferecendo ferramentas de marketing de performance, soluções criativas para anúncios e insights orientados por dados. O portfólio inclui produtos como o Vungle Exchange, o Creative Studio e as soluções Intelligence, com o objetivo de maximizar a receita e criar experiências de anúncios impactantes em aplicativos mobile.

Descrição

• Independently plan and execute internal penetration tests across applications, APIs, cloud infrastructure, and corporate systems • Prioritize assessments by risk and business impact • Define testing scope and rules of engagement with system owners • Assess production risk and safely validate vulnerabilities • Combine hands-on testing with source-code review and architectural analysis • Partner with engineering teams on findings, remediation, and retesting • Maintain knowledge of Liftoff’s systems and attack surface • Turn confirmed findings into repeatable tests • Build testing tools and workflows for automated testing and remediation validation • Make security testing self-service through reusable tests and documented workflows • Support annual third-party penetration testing and follow findings through remediation • Lead adoption of AI-assisted offensive security tooling for code analysis, test generation, and finding triage • Partner with Detection & Response on detection improvements and incident-response exercises • Support application, cloud, and infrastructure security priorities, including Accelerate and MX • Participate in on-call and incident-response rotation, including occasional off-hours response and post-incident follow-up

🎯 Requisitos

• 5+ years of relevant security engineering experience, including substantial hands-on penetration testing of applications and infrastructure • Excellent judgment in prioritizing testing by risk, assessing production impact, and safely validating exploits • Experience independently owning assessments through remediation and retesting • Ability to write production-quality code for security tools and automation • Ability to review pull requests and navigate large, unfamiliar codebases • Ability to develop safe proof-of-concept code and independently validate AI-generated code and findings • Strong understanding of application and API security, authentication and authorization, network security, and common vulnerability classes • Hands-on experience assessing cloud and infrastructure security, including identity and access controls, configuration, and attack paths • Ability to understand complex systems and architecture and contribute across application, cloud, and infrastructure security • Practical software engineering habits including testing, observability, version control, peer code review, continuous integration, and blameless postmortems • Strong technical writing skills for assessment plans, proposals, reproducible findings, runbooks, and post-incident reviews • Willingness to share on-call and incident-response responsibilities, including occasional off-hours response • Experience with Go, Python, Clojure, or JavaScript is desirable • Experience building AI-assisted security testing workflows is desirable • Experience securing large-scale cloud systems, mobile advertising, or high-volume SaaS environments is desirable

🏖️ Benefícios

• Bonus • Equity • Medical coverage • Wellness stipends • Additional perks based on country of residence • Fast-paced, collaborative, and innovative work environment • Employee growth and impact opportunities

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo