Offensive Security & Code Analysis Engineer

Districttechgroup; Washington (District of Columbia); Hybrid; USD 80,000 - 120,000; Full time

Benefits offered by this job

Fully remote work environment

Competitive salary and performance bonuses

Health, dental, and vision insurance

Professional development and certification support

Job summary

A progressive technology company is seeking an Offensive Security & Code Analysis Engineer. In this role, you will conduct penetration testing and security assessments to identify vulnerabilities in web applications and networks. The ideal candidate should possess 3+ years of experience in penetration testing, have a strong understanding of security vulnerabilities, and excellent communication skills. This position offers fully remote work, competitive salary, and comprehensive benefits.

Qualifications

• 3+ years of experience in penetration testing or offensive security.
• Strong knowledge of web application vulnerabilities (OWASP Top 10).
• Excellent report writing and communication skills.

Responsibilities

• Conduct penetration testing of web applications, networks, and cloud environments.
• Perform source code security reviews and static/dynamic analysis.
• Develop detailed reports with findings and remediation guidance.

Skills

Penetration testing

Web application vulnerabilities

Report writing

Analytical problem-solving

Tools

Burp Suite

Metasploit

Nmap

Job description

Offensive Security & Code Analysis Engineer

Washington, DC Remote Full-Time

About This Role

As an Offensive Security & Code Analysis Engineer, you will identify vulnerabilities before attackers do. You will conduct penetration testing, code reviews, and security assessments to help our clients strengthen their defenses. This role combines hands-on technical testing with strategic security consulting.

Responsibilities

• • Conduct penetration testing of web applications, networks, and cloud environments
• • Perform source code security reviews and static/dynamic analysis
• • Identify and exploit vulnerabilities in client applications and infrastructure
• • Develop detailed reports with findings, risk ratings, and remediation guidance
• • Create proof-of-concept exploits and demonstrations
• • Research emerging attack techniques and develop new testing methodologies
• • Collaborate with development teams on secure coding practices
• • Present findings to technical and executive audiences
• • Contribute to red team engagements and adversary simulations

Qualifications

• ✓ 3+ years of experience in penetration testing or offensive security
• ✓ Strong knowledge of web application vulnerabilities (OWASP Top 10)
• ✓ Experience with penetration testing tools (Burp Suite, Metasploit, Nmap, etc.)
• ✓ Understanding of secure coding practices and common code vulnerabilities
• ✓ Knowledge of network protocols, Active Directory, and cloud environments
• ✓ Excellent report writing and communication skills
• ✓ Strong analytical and creative problem-solving abilities

Preferred Qualifications

• + Offensive security certifications (OSCP, OSWE, GPEN, or equivalent)
• + Bug bounty experience or CVE publications
• + Experience with mobile application security testing
• + Cloud security testing experience (AWS, Azure, GCP)
• + Familiarity with DevSecOps and CI/CD security integration
• + Reverse engineering or malware analysis experience

What We Offer

• ★ Fully remote work environment
• ★ Competitive salary and performance bonuses
• ★ Health, dental, and vision insurance
• ★ Professional development and certification support
• ★ Access to the latest security tools and training
• ★ Opportunity to work on diverse and challenging engagements