Senior Offensive Security Engineer

Emploi pas sur LinkedIn

🕒 il y a 1 mois

🌾 Iowa – Distant

🌾 Iowa – Remote

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 21%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

ProCircular

Site WebLinkedInTous les Emplois

11 - 50 employés

💼 Conseil

🏥 Santé

⚖️ Juridique

💰 €25 000 Debt Financing en 2022-05

Consulting • Healthcare • Legal

ProCircular est passionné par la cybersécurité et attaché à la qualité, l'entreprise est centrée sur les personnes. Elle se concentre sur la construction de relations et de confiance tout en fournissant des recommandations pratiques pour gérer de manière proactive les risques et respecter les engagements réglementaires. Ses services incluent la sécurité de l'information, les tests d'intrusion, la cybercriminalistique, et la conformité à diverses normes telles que l'ISO 27001 et le PCI. ProCircular vise à contrer les dernières menaces cybernétiques tout en maintenant une approche axée sur le client qui guide leur travail vers des résultats tangibles et des feuilles de route claires.

Description

• Plan and execute internal and external network penetration tests from scoping through remediation guidance • Run client engagements independently, owning scope, testing, reporting, and client readouts • Write actionable findings for system administrators and understandable summaries for executives • Present results to technical teams, IT directors, executive sponsors, and boards • Retest remediated findings and help clients close security gaps • Contribute to purple team exercises and adversary simulation engagements • Build ProCircular's AI red team practice and define its methodology • Design testing methodologies for chatbots, autonomous agents, RAG pipelines, and MCP servers • Test for prompt injection, tool abuse, excessive agency, guardrail bypass, sensitive data exposure, and unsafe model-output handling • Assess MCP servers and agent integrations for authorization gaps, over-permissioned tools, tool poisoning, and insecure defaults • Map AI security work to OWASP Top 10 for Large Language Model Applications, MITRE ATLAS, and the NIST AI Risk Management Framework • Create repeatable AI red team services, including scoping questions, test plans, report templates, and pricing input • Build and ship internal tooling to improve testing speed and consistency • Automate repetitive reconnaissance, validation, and reporting tasks • Provide offensive-security input to improve internal security products • Work independently without supervisory responsibilities

🎯 Exigences

• Five or more years of hands-on offensive security experience • OSCP or an equivalent hands-on, practical certification • Deep experience in internal and external network penetration testing, including Active Directory attack paths, credential attacks, privilege escalation, and lateral movement • Ability to carry a client engagement independently from kickoff through readout • Strong written English • Ability to work remotely on a distributed team • Ability to pass background checks required by education and public sector clients • Ability to work with Python; development experience in TypeScript or Go is desired • Web application and API testing experience is desired • Cloud testing experience in AWS, Microsoft Azure, or Microsoft 365 is desired • Hands-on experience attacking or defending AI systems, agents, or MCP servers is desired • Experience with Claude Code, Codex, Hermes, or OpenClaw is strongly preferred • Additional certifications such as OSWE, OSEP, CRTO, GPEN, or GXPN are desired • Social engineering or physical security testing experience is desired • Excellent English communication skills, including active listening, asking clarifying questions, and clear written and verbal communication • High-functioning reasoning abilities • Ability to occasionally lift up to 40 lbs.; sit for long periods; view a computer monitor; and type frequently or constantly for up to 8 hours per day • Valid driver's license required for occasional travel under 10% • Must work 40 hours within a regular workweek • Must be located in the United States and legally authorized to work without visa sponsorship now or in the future

🏖️ Avantages

• Flexible schedule, subject to preapproval, if performance expectations are met • Full-time employment at 40 hours per week • Opportunity to build an AI red team practice from the ground up • Opportunity to develop internal tooling and automation • Professional growth through work across offensive security, AI red teaming, purple teaming, and adversary simulation