Lead Offensive Security Engineer – Product & IoT Security

ecolab; United States; On-site; USD 150,000 - 230,000; Full time

Job summary

Ecolab seeks a Lead Offensive Security Engineer to drive hands-on testing across commercial digital products, including web, mobile, APIs, cloud services, and IoT devices.

You will lead a small internal team, define engagement scope, testing methods, reporting standards, and remediation validation while collaborating with product security, engineering, and business stakeholders to reduce risk in Ecolab's offerings.

Qualifications

• Bachelor's degree in cybersecurity, CS, IT, engineering or related field.
• 8+ years in cybersecurity, application security or related technical field.
• Hands-on testing of web, mobile, APIs, cloud and IoT products with authorization.
• Experience leading offensive security engagements and teams.
• Experience with Azure; familiarity with AWS/GCP security concepts.
• Experience with applications

Responsibilities

• Lead and perform hands-on offensive security testing across products.
• Plan, scope, and execute technical security assessments for vulnerabilities.
• Lead a small internal offensive security team and provide day-to-day testing.
• Develop repeatable red team methods and testing engagement rules.
• Translate results into remediation actions with risk-based priorities.
• Conduct safe testing of IoT and industrial equipment where appropriate.
• Use security tools to identify, validate, and document issues.
• Prepare clear reports with impact, remediation guidance and validation.
• Present findings to engineers and non-technical stakeholders.
• Support threat modeling, secure architecture reviews, and cloud security discussions.

Skills

Offensive security

Penetration testing

Security testing

Threat modeling

Reporting / communication

Team leadership

Cloud security

IoT security

Education

Bachelor's Degree in Cybersecurity

Bachelor's Degree in Computer Science

Bachelor's Degree in Information Technology

Bachelor's Degree in Engineering

Tools

Snyk

Wiz

Burp Suite

OWASP ZAP

GitHub Advanced Security

Nmap

Horizon3 NodeZero

DAST tooling

Job description

Ecolab seeks a Lead Offensive Security Engineer to drive hands-on testing across commercial digital products, including web, mobile, APIs, cloud services, and IoT devices.

You will lead a small internal team, define engagement scope, testing methods, reporting standards, and remediation validation while collaborating with product security, engineering, and business stakeholders to reduce risk in Ecolab's offerings.