Remote Offensive Security Engineer - Red Team & Tooling

Praxy; Northern (KY); Hybrid; USD 170,000 - 256,000; Full time

Benefits offered by this job

Equity participation (Stripe)?

401(k) plan with employer matching

Medical, dental, and vision coverage

Wellness stipends

Training and conference budget

Job summary

Stripe is seeking an Offensive Security Engineer to simulate attacker techniques across web applications, cloud environments, and APIs. You will lead red-team engagements and develop custom offensive tooling to scale assessments.

You will collaborate with blue-team and incident response partners, deliver risk-based findings, and mentor junior engineers while staying current with emerging threats and attack techniques.

Qualifications

• 5+ years of experience in offensive security, penetration testing, red teaming, or a related field.
• Strong programming skills in Python, Go, or similar languages, with demonstrated experience building tools or automation.
• Deep knowledge of web application security, including OWASP Top 10 and ASVS.

Responsibilities

• Conduct comprehensive penetration tests across web applications, APIs, cloud environments (AWS/Azure/GCP), mobile apps, and internal infrastructure.
• Plan and execute red team engagements emulating real-world threat actors targeting financial services.
• Produce clear, actionable reports communicating risks and remediation recommendations to technical and non-technical stakeholders.
• Collaborate with detection engineering, threat intelligence, and incident response teams to validate controls and improve coverage.

Skills

5+ years offensive security

Python/Go programming

Web security (OWASP/ASVS)

Cloud platforms (AWS/Azure/GCP)

Offensive tooling (Burp Suite, Cobalt)

MITRE ATT&CK knowledge

Communication skills

Tools

Burp Suite

Cobalt Strike

Mythic

Sliver

BloodHound

Job description

Stripe is seeking an Offensive Security Engineer to simulate attacker techniques across web applications, cloud environments, and APIs. You will lead red-team engagements and develop custom offensive tooling to scale assessments.

You will collaborate with blue-team and incident response partners, deliver risk-based findings, and mentor junior engineers while staying current with emerging threats and attack techniques.