Senior AWS Pentest Engineer — Remote-First Security Leader

Offchain; Portugal; Remote; EUR 90,000 - 140,000; Full time

Benefits offered by this job

Remote‑first global workforce

Professional reimbursement program

Medical, dental & vision coverage

401k retirement plan + company match

Wellness stipend

Home office setup program

Job summary

Offchain is leading blockchain scalability and security, building the Arbitrum stack used by numerous projects. As a Senior Security Engineer, you will emulate adversaries, perform hands‑on penetration tests, and work with blue teams to strengthen detection and response across our infrastructure and ecosystem tools.

You will shape security design and compliance for infrastructure powering millions of users, including SOC 2, while collaborating across detection engineering, threat intelligence,

Qualifications

• 5+ years of offensive security, penetration testing, red teaming, or related field.
• Experience with conducting code audits to identify and remediate security issues.
• Experience with binary exploitation.
• Mastery of AWS & attack techniques and configuration weaknesses.
• Strong understanding of adversary tactics and frameworks like MITRE ATT&CK.
• In‑depth knowledge of web application security, including OWASP Top 10, ASVS, and vulnerability categories.
• Proficiency using offensive security tools such as Burp Suite, nuclei and similar frameworks.
• Strong programming skills in Python, Go, or similar languages, with experience developing tools or automation.
• Excellent written and verbal communication, able to present complex technical details clearly.
• Attacker mindset with risk assessment across complex systems.

Responsibilities

• Emulate real‑world tactics to surface vulnerabilities across infrastructure and ecosystem tools.
• Lead hands‑on penetration tests, red team exercises, and collaborate with blue teams.
• Shape design, launch, protection, and compliance for infrastructure powering millions of users (SOC 2).
• Conduct comprehensive code audits across internal apps and infrastructure.
• Run penetration tests across cloud environments (AWS) and backend apps.
• Collaborate with detection engineering, threat intel, and IR to improve controls and coverage.
• Build, maintain, and evolve offensive tools and automation frameworks.
• Mentor junior team members and promote ongoing learning.

Skills

Offensive security

Penetration testing

Red teaming

AWS security

MITRE ATT&CK

Web app security

Python

Go

Automation tooling

Communication

Education

Bachelor's degree in CS/IS

Tools

Burp Suite

Nuclei

Python

Go

Git

AWS

Job description

Offchain is leading blockchain scalability and security, building the Arbitrum stack used by numerous projects. As a Senior Security Engineer, you will emulate adversaries, perform hands‑on penetration tests, and work with blue teams to strengthen detection and response across our infrastructure and ecosystem tools.

You will shape security design and compliance for infrastructure powering millions of users, including SOC 2, while collaborating across detection engineering, threat intelligence,