Senior Offensive Security Engineer

Job not on LinkedIn

🕒 August 27

🌾 Iowa – Remote

🌾 Iowa – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 17%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

ProCircular

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🏥 Healthcare

⚖️ Legal

💰 $25k Debt Financing on 2022-05

Consulting • Healthcare • Legal

ProCircular is passionate about cybersecurity and serious about quality, built around people. The company focuses on building relationships and trust while providing practical recommendations to proactively manage risk and meet regulatory commitments. Their services include information security, penetration testing, data forensics, and compliance with various standards such as ISO 27001 and PCI. ProCircular aims to address the latest cyber threats while maintaining a client-centered approach that guides their work toward tangible outcomes and clear roadmaps.

📋 Description

• Plan and execute internal and external network penetration tests from scoping through remediation guidance • Run client engagements independently, owning scope, testing, reporting, and client readouts • Write actionable findings for system administrators and understandable summaries for executives • Present results to technical teams, IT directors, executive sponsors, and boards • Retest remediated findings and help clients close security gaps • Contribute to purple team exercises and adversary simulation engagements • Build ProCircular's AI red team practice and define its methodology • Design testing methodologies for chatbots, autonomous agents, RAG pipelines, and MCP servers • Test for prompt injection, tool abuse, excessive agency, guardrail bypass, sensitive data exposure, and unsafe model-output handling • Assess MCP servers and agent integrations for authorization gaps, over-permissioned tools, tool poisoning, and insecure defaults • Map AI security work to OWASP Top 10 for Large Language Model Applications, MITRE ATLAS, and the NIST AI Risk Management Framework • Create repeatable AI red team services, including scoping questions, test plans, report templates, and pricing input • Build and ship internal tooling to improve testing speed and consistency • Automate repetitive reconnaissance, validation, and reporting tasks • Provide offensive-security input to improve internal security products • Work independently without supervisory responsibilities

🎯 Requirements

• Five or more years of hands-on offensive security experience • OSCP or an equivalent hands-on, practical certification • Deep experience in internal and external network penetration testing, including Active Directory attack paths, credential attacks, privilege escalation, and lateral movement • Ability to carry a client engagement independently from kickoff through readout • Strong written English • Ability to work remotely on a distributed team • Ability to pass background checks required by education and public sector clients • Ability to work with Python; development experience in TypeScript or Go is desired • Web application and API testing experience is desired • Cloud testing experience in AWS, Microsoft Azure, or Microsoft 365 is desired • Hands-on experience attacking or defending AI systems, agents, or MCP servers is desired • Experience with Claude Code, Codex, Hermes, or OpenClaw is strongly preferred • Additional certifications such as OSWE, OSEP, CRTO, GPEN, or GXPN are desired • Social engineering or physical security testing experience is desired • Excellent English communication skills, including active listening, asking clarifying questions, and clear written and verbal communication • High-functioning reasoning abilities • Ability to occasionally lift up to 40 lbs.; sit for long periods; view a computer monitor; and type frequently or constantly for up to 8 hours per day • Valid driver's license required for occasional travel under 10% • Must work 40 hours within a regular workweek • Must be located in the United States and legally authorized to work without visa sponsorship now or in the future

🏖️ Benefits

• Flexible schedule, subject to preapproval, if performance expectations are met • Full-time employment at 40 hours per week • Opportunity to build an AI red team practice from the ground up • Opportunity to develop internal tooling and automation • Professional growth through work across offensive security, AI red teaming, purple teaming, and adversary simulation