Senior Offensive Security Engineer

Vaga não está no LinkedIn

🕒 Agosto 27

🌾 Iowa – Remoto

🌾 Iowa – Remote

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 26%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

ProCircular

SiteLinkedInTodas as Vagas

11 - 50 funcionários

💼 Consultoria

🏥 Saúde

⚖️ Jurídico

💰 $25.000 Debt Financing em 2022-05

Consulting • Healthcare • Legal

A ProCircular é apaixonada por cibersegurança e leva a sério a qualidade, sendo construída em torno das pessoas. A empresa foca em construir relacionamentos e confiança enquanto oferece recomendações práticas para gerir riscos proativamente e cumprir compromissos regulatórios. Seus serviços incluem segurança da informação, testes de penetração, análise forense de dados e conformidade com várias normas, como ISO 27001 e PCI. A ProCircular visa enfrentar as mais recentes ameaças cibernéticas enquanto mantém uma abordagem centrada no cliente que orienta seu trabalho para resultados tangíveis e roteiros claros.

Descrição

• Plan and execute internal and external network penetration tests from scoping through remediation guidance • Run client engagements independently, owning scope, testing, reporting, and client readouts • Write actionable findings for system administrators and understandable summaries for executives • Present results to technical teams, IT directors, executive sponsors, and boards • Retest remediated findings and help clients close security gaps • Contribute to purple team exercises and adversary simulation engagements • Build ProCircular's AI red team practice and define its methodology • Design testing methodologies for chatbots, autonomous agents, RAG pipelines, and MCP servers • Test for prompt injection, tool abuse, excessive agency, guardrail bypass, sensitive data exposure, and unsafe model-output handling • Assess MCP servers and agent integrations for authorization gaps, over-permissioned tools, tool poisoning, and insecure defaults • Map AI security work to OWASP Top 10 for Large Language Model Applications, MITRE ATLAS, and the NIST AI Risk Management Framework • Create repeatable AI red team services, including scoping questions, test plans, report templates, and pricing input • Build and ship internal tooling to improve testing speed and consistency • Automate repetitive reconnaissance, validation, and reporting tasks • Provide offensive-security input to improve internal security products • Work independently without supervisory responsibilities

🎯 Requisitos

• Five or more years of hands-on offensive security experience • OSCP or an equivalent hands-on, practical certification • Deep experience in internal and external network penetration testing, including Active Directory attack paths, credential attacks, privilege escalation, and lateral movement • Ability to carry a client engagement independently from kickoff through readout • Strong written English • Ability to work remotely on a distributed team • Ability to pass background checks required by education and public sector clients • Ability to work with Python; development experience in TypeScript or Go is desired • Web application and API testing experience is desired • Cloud testing experience in AWS, Microsoft Azure, or Microsoft 365 is desired • Hands-on experience attacking or defending AI systems, agents, or MCP servers is desired • Experience with Claude Code, Codex, Hermes, or OpenClaw is strongly preferred • Additional certifications such as OSWE, OSEP, CRTO, GPEN, or GXPN are desired • Social engineering or physical security testing experience is desired • Excellent English communication skills, including active listening, asking clarifying questions, and clear written and verbal communication • High-functioning reasoning abilities • Ability to occasionally lift up to 40 lbs.; sit for long periods; view a computer monitor; and type frequently or constantly for up to 8 hours per day • Valid driver's license required for occasional travel under 10% • Must work 40 hours within a regular workweek • Must be located in the United States and legally authorized to work without visa sponsorship now or in the future

🏖️ Benefícios

• Flexible schedule, subject to preapproval, if performance expectations are met • Full-time employment at 40 hours per week • Opportunity to build an AI red team practice from the ground up • Opportunity to develop internal tooling and automation • Professional growth through work across offensive security, AI red teaming, purple teaming, and adversary simulation

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo