Senior Security Engineer, Offensive Security

Job not on LinkedIn

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $184k - $220k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Liftoff Mobile

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2012

📣 Marketing

Marketing • Advertising • Mobile

Liftoff Mobile is a leading platform designed to enhance mobile advertising and growth for businesses. The company specializes in leveraging advanced machine learning solutions through its Cortex platform to improve user acquisition, engagement, and monetization strategies in the mobile ecosystem. Liftoff's services cater to marketers, mobile game developers, and agencies, providing tools for performance marketing, creative ad solutions, and data-driven insights. Their offerings include products like the Vungle Exchange, Creative Studio, and Intelligence solutions, aimed at maximizing earnings and creating impactful ad experiences across mobile applications.

📋 Description

• Independently plan and execute internal penetration tests across applications, APIs, cloud infrastructure, and corporate systems • Prioritize assessments by risk and business impact • Define testing scope and rules of engagement with system owners • Assess production risk and safely validate vulnerabilities • Combine hands-on testing with source-code review and architectural analysis • Partner with engineering teams on findings, remediation, and retesting • Maintain knowledge of Liftoff’s systems and attack surface • Turn confirmed findings into repeatable tests • Build testing tools and workflows for automated testing and remediation validation • Make security testing self-service through reusable tests and documented workflows • Support annual third-party penetration testing and follow findings through remediation • Lead adoption of AI-assisted offensive security tooling for code analysis, test generation, and finding triage • Partner with Detection & Response on detection improvements and incident-response exercises • Support application, cloud, and infrastructure security priorities, including Accelerate and MX • Participate in on-call and incident-response rotation, including occasional off-hours response and post-incident follow-up

🎯 Requirements

• 5+ years of relevant security engineering experience, including substantial hands-on penetration testing of applications and infrastructure • Excellent judgment in prioritizing testing by risk, assessing production impact, and safely validating exploits • Experience independently owning assessments through remediation and retesting • Ability to write production-quality code for security tools and automation • Ability to review pull requests and navigate large, unfamiliar codebases • Ability to develop safe proof-of-concept code and independently validate AI-generated code and findings • Strong understanding of application and API security, authentication and authorization, network security, and common vulnerability classes • Hands-on experience assessing cloud and infrastructure security, including identity and access controls, configuration, and attack paths • Ability to understand complex systems and architecture and contribute across application, cloud, and infrastructure security • Practical software engineering habits including testing, observability, version control, peer code review, continuous integration, and blameless postmortems • Strong technical writing skills for assessment plans, proposals, reproducible findings, runbooks, and post-incident reviews • Willingness to share on-call and incident-response responsibilities, including occasional off-hours response • Experience with Go, Python, Clojure, or JavaScript is desirable • Experience building AI-assisted security testing workflows is desirable • Experience securing large-scale cloud systems, mobile advertising, or high-volume SaaS environments is desirable

🏖️ Benefits

• Bonus • Equity • Medical coverage • Wellness stipends • Additional perks based on country of residence • Fast-paced, collaborative, and innovative work environment • Employee growth and impact opportunities

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume