Lead Offensive Security Engineer - Red Team & Bug Bounty

Group 1001; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401K with company matching

Job summary

Group 1001 is seeking an experienced offensive security leader to own penetration testing, red teaming, and the private bug bounty program. You will align testing with development cycles to reduce real-world risk and improve threat detection across cloud, endpoints, web, and APIs.

Reporting to the AVP of Security Lifecycle & Architecture, you will collaborate with multiple security and engineering teams to embed security testing into every delivery cycle, enabling safer production deployments

Qualifications

• Plan, scope, execute, and report penetration tests across cloud, endpoint, web, and API environments.
• Lead private bug bounty program and continuous attack surface monitoring.
• Collaborate with development teams to integrate security testing into delivery cycles.
• 8+ years hands-on penetration testing or red teaming experience.
• Strong understanding of adversarial TTPs and modern detection capabilities.
• Excellent written and verbal communication for executive reporting.
• Comprehensive health, dental, and vision insurance; life and disability coverage.
• 401K plan with company matching contributions.

Responsibilities

• Plan, scope, execute, and report on penetration tests across cloud, endpoint, web, and API environments.
• Manage the private bug bounty program and continuous attack surface monitoring.
• Partner with development teams to integrate security testing into their delivery cycles.

Skills

Penetration testing

Red teaming

Security testing

Executive communication

Tools

Bug bounty platforms

Attack surface monitoring tools

Job description

Group 1001 is seeking an experienced offensive security leader to own penetration testing, red teaming, and the private bug bounty program. You will align testing with development cycles to reduce real-world risk and improve threat detection across cloud, endpoints, web, and APIs.

Reporting to the AVP of Security Lifecycle & Architecture, you will collaborate with multiple security and engineering teams to embed security testing into every delivery cycle, enabling safer production deployments