Offensive Security Engineer

RightClick; City of Poughkeepsie (NY); Hybrid; USD 110,000 - 140,000; Full time

Job summary

RightClick is seeking an Offensive Security Engineer to help build a brand-new offensive security program from the ground up. The role is hands-on and reports to leadership, with a hybrid work arrangement in Dutchess County, NY.

You will design tooling, conduct red teaming, perform penetration tests, and lead threat emulation exercises to identify gaps and improve defenses as the program matures.

Qualifications

• At least 3 years of hands-on red teaming, penetration testing, or threat emulation.
• IT foundation preferred before moving into security.
• Degree flexibility for candidates with proven experience.
• Ability to work independently and shape a program with no existing infrastructure.
• Strong knowledge of attack frameworks and MITRE ATT&CK.

Responsibilities

• Design, build, and select tooling for a new offensive security program.
• Conduct red team engagements to identify weaknesses across systems and networks.
• Perform penetration testing against internal and external environments.
• Execute threat emulation to simulate real-world adversary tactics.
• Validate security controls and identify coverage gaps.
• Document findings, methodologies, and remediation recommendations.
• Help evaluate and stand up tooling and processes as the program matures.

Skills

Red teaming

Penetration testing

Threat emulation

MITRE ATT&CK

Independent work

Job description

Our client is seeking an Offensive Security Engineer to help build and shape a brand-new offensive security program from the ground up. The ideal candidate will be hands-on, resourceful, and comfortable working directly with leadership to establish new processes and tooling. This is a hybrid position based in Dutchess County, NY.

Offensive Security Engineer's Responsibilities And Duties

• Partner directly with leadership to design, build, and select tooling for a net-new offensive security program
• Conduct hands-on red teaming engagements to identify exploitable weaknesses across systems and networks
• Perform penetration testing against internal and external environments
• Execute threat emulation exercises to simulate real-world adversary tactics, techniques, and procedures
• Validate existing security controls and identify gaps in coverage
• Document findings, methodologies, and remediation recommendations for stakeholders
• Help evaluate and stand up offensive security tooling and processes as the program matures

Offensive Security Engineer's Qualifications And Skills

• At least 3 years of professional, hands-on experience in red teaming, penetration testing, or threat emulation
• Strong foundation in IT prior to moving into security preferred
• Practical, applied experience with control validation, not just conceptual knowledge
• Non-traditional backgrounds welcome, including military experience; degree requirement flexible for candidates with real, demonstrated experience
• Ability to work independently and help shape a program without existing infrastructure or precedent
• Solid understanding of common attack frameworks and methodologies (e.g., MITRE ATT&CK)

RightClick is an equal opportunity employer who agrees not to discriminate against any employee or job applicant irrespective of race, color, creed, alienage, religion, sex, national origin, age, disability, gender (including gender identity), marital status, sexual orientation, citizenship or any other characteristic protected by law.