Staff Offensive Security Engineer

🕒 il y a 1 mois

🏄 California, Colorado, +2 états de plus – Distant

infoinfo

💵 $165 000 - $200 000 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

infoinfo

👻 Score fantôme 2%

infoinfo

🗣️🇺🇸🇬🇧 Anglais requis

Postuler Maintenant
Trouver des Emplois à Distance Similaires

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Logo of Greenlight

Greenlight

201 - 500 employés

Fondée en 2014

💳 Fintech

📚 Éducation

👥 B2C

💰 €260 000 000 Series D en 2021-04

Fintech • Education • B2C

Greenlight est une entreprise de technologie financière dédiée à fournir des outils et des expériences d'éducation financière pour les familles, en mettant particulièrement l'accent sur les enfants et les adolescents. Elle propose une carte de débit spécialement conçue pour les enfants, soutenue par une application qui permet aux parents de surveiller les dépenses, d'automatiser les allocations et de fixer des objectifs d'épargne. Greenlight facilite une expérience d'apprentissage complète en incorporant la gestion des corvées, des opportunités d'investissement et un jeu éducatif financier qui enseigne des compétences monétaires pratiques. Elle inclut également des fonctionnalités de sécurité telles que le partage de localisation et les alertes de conduite pour garder les familles connectées et en sécurité. Grâce à des partenariats avec des banques, l'application offre divers plans personnalisables qui encouragent des habitudes financières intelligentes dès le plus jeune âge.

Description

• Define the long-term vision and technical strategy for offensive security at Greenlight • Design and execute complex, multi-stage adversary simulations targeting AWS cloud infrastructure, iOS/Android mobile applications, and internal corporate environments • Conduct deep-dive vulnerability research into high-risk areas, including zero-day vulnerabilities and sophisticated logic flaws • Partner with DevOps and Engineering to build automated security guardrails and self-healing infrastructure • Work with the Detection and Response team on purple team exercises to improve monitoring and validate alert coverage • Mentor senior and mid-level engineers and foster security-minded development across the R&D organization • Perform continuous offensive security validation across consumer digital platforms, mobile applications, cloud infrastructure, internal corporate environments, and emerging hardware device lines

🎯 Exigences

• 8+ years of experience in offensive security, red teaming, or penetration testing • Proven track record of uncovering critical vulnerabilities in complex environments • Deep understanding of AWS security architecture, including IAM bypass techniques, container escapes (Kubernetes), and serverless security • Experience with manual code review in Node.js, Python, or Go • Experience with bypass techniques for modern web and mobile security controls • Ability to script in Python, Bash, or Go • Ability to automate exploitation chains or integrate security testing into CI/CD pipelines • Ability to translate complex technical risks into business impact for executive stakeholders • Relevant certifications such as OSCP/OSCE or GXPN are optional but valued • Curiosity, persistence, and ability to think outside the box • Collaborative approach to helping teams build systems back stronger • Strong ownership and responsibility for security

🏖️ Avantages

• Discretionary performance bonus • Equity rewards • Medical, dental, vision, and HSA match • Paid life insurance, AD&D, and disability benefits • Traditional 401k with company match • Unlimited PTO • Paid company holidays and pop-up bonus holidays • Professional development stipend • Mental health resources • 1:1 financial planners • Fertility healthcare • 100% paid parental and caregiving leave, plus cleaning service and meals during your leave • Flexible WFH, both remote and in-office opportunities • Fully stocked kitchen, catered lunches, and occasional in-office happy hours • Employee resource groups

Postuler Maintenant

Emplois Similaires

🕒 il y a 1 mois

Ziply Fiber

1001 - 5000

💼 Conseil

📦 Logistique

📡 Télécommunications

Principal Architect securing Ziply Fiber’s broadband network, enterprise systems, and cloud environments. Defining Zero Trust, IAM, detection, application, and AI security architecture.

🇺🇸 États-Unis – Télétravail

💵 $155 000 - $230 000 / an

💰 Corporate Round en 2022-11

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🗣️🇺🇸🇬🇧 Anglais requis

🕒 il y a 1 mois

Synack, Inc.

201 - 500

🔒 Cybersecurity

📋 Conformité

☁️ SaaS

Information Security Compliance Manager automating compliance and AI governance for Synack’s penetration-testing platform. Maintaining security controls across cloud infrastructure serving enterprise customers and US agencies.

🇺🇸 États-Unis – Télétravail

💵 $150 000 - $180 000 / an

⏰ Temps Plein

🟠 Senior

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🗣️🇺🇸🇬🇧 Anglais requis

🕒 il y a 1 mois

Danaher

10 000+ employés

🧬 Biotechnologie

🏥 Santé

🔬 Science

Global Security Director leading risk, crisis, travel, and executive protection programs. Protecting Beckman Coulter Diagnostics’ global diagnostics operations, employees, facilities, and assets.

🇺🇸 États-Unis – Télétravail

💵 $200 000 - $215 000 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🗣️🇺🇸🇬🇧 Anglais requis

🕒 il y a 1 mois

Magna5

51 - 200

💼 Conseil

🏥 Santé

📦 Logistique

Virtual CISO guiding cybersecurity governance, risk, compliance, and system security engineering. Supporting audits and incident response for Magna5’s managed IT services customers.

🗣️🇺🇸🇬🇧 Anglais requis

Cyber Security

Firewalls

🕒 il y a 1 mois

Ziply Fiber

1001 - 5000

💼 Conseil

📦 Logistique

📡 Télécommunications

Enterprise security architect defining Zero Trust, cloud, network, and AI security for Ziply Fiber's broadband infrastructure. Setting enterprise standards across corporate systems and subscriber network environments.

🇺🇸 États-Unis – Télétravail

💵 $155 000 - $230 000 / an

💰 Corporate Round en 2022-11

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🗣️🇺🇸🇬🇧 Anglais requis

Cloud

Cyber Security

DNS

Firewalls

IoT

Kubernetes

SDLC