Offensive Security Engineer: Pen Tests, Cloud & CI/CD

TTM Technologies; Town of Texas (WI); Hybrid; USD 90,000 - 140,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401K

Flexible Spending Account

Health Savings Account

Accident benefits

Life insurance

Disability benefits

Paid vacation & holidays

Job summary

TTM Technologies, Inc. is seeking a hands-on Offensive Security Engineer to join our security team in a hybrid role.

You will perform penetration testing, red team style engagements, and vulnerability validation across applications, infrastructure, and cloud environments, partnering with engineering, DevOps, and detection/response teams to ensure findings are accurate and remediated. Responsibilities include building offensive tooling, developing exploits, and integrating security testing into

Qualifications

• 2+ years of hands-on experience in penetration testing, red teaming, or offensive security (adjust based on seniority).
• Strong knowledge of web application security (OWASP Top 10), network penetration testing, and common exploitation techniques.
• Proficiency with offensive tooling such as Burp Suite, Metasploit, Nmap, BloodHound, Cobalt Strike (or equivalents), Impacket, etc.
• Scripting/programming experience in at least one of: Python, Go, PowerShell, Bash, or similar.
• Experience validating vulnerabilities from scanners (e.g., Nessus, Qualys, Snyk, Wiz, Burp) and distinguishing true positives from noise.
• Solid understanding of cloud security concepts and at least one major cloud provider (AWS, Azure, or GCP).
• Strong written and verbal communication skills - able to translate technical findings into business risk.

Responsibilities

• Plan and execute penetration tests against web applications, APIs, cloud environments (AWS/Azure/GCP), networks, and internal systems.
• Conduct red team-style engagements simulating real-world adversary tactics, techniques, and procedures (TTPs) aligned with frameworks like MITRE ATT&CK.
• Deliver clear, actionable reports with reproducible steps, business impact, and remediation guidance.
• Offensive Engineering: Build, maintain, and improve internal offensive security tooling, automation, and attack infrastructure.
• Develop custom exploits, proof-of-concept code, and scripts to test controls at scale.
• Integrate offensive testing into CI/CD pipelines (continuous attack simulation, automated recon, etc.).
• Contribute to purple team exercises to validate and improve detection and response capabilities.

Skills

OWASP Top 10

Web app security

Network pen testing

Python

Go

PowerShell

Bash

Cloud security (AWS/Azure/GCP)

Offensive tooling (Burp Suite)

Nessus/Qualys/Burp

Communication

Tools

Burp Suite

Metasploit

Nmap

BloodHound

Cobalt Strike

Impacket

Job description

TTM Technologies, Inc. is seeking a hands-on Offensive Security Engineer to join our security team in a hybrid role.

You will perform penetration testing, red team style engagements, and vulnerability validation across applications, infrastructure, and cloud environments, partnering with engineering, DevOps, and detection/response teams to ensure findings are accurate and remediated. Responsibilities include building offensive tooling, developing exploits, and integrating security testing into