Senior AWS Penetration Tester – Offensive Security Lead

Arbitrum; Northern (KY); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Remote-first global workforce

NY office access

Job summary

Offchain is seeking a Senior Security Engineer to emulate adversaries, run penetration tests and lead red team exercises across our infrastructure and ecosystem tools. You will shape how we design, launch, protect, and ensure SOC 2 readiness for critical systems, including cloud and backend applications.

You’ll collaborate with detection, threat intel and incident response teams, develop offensive tooling, and mentor junior engineers while staying ahead of evolving threats and attack methods in

Qualifications

• 5+ years of experience in offensive security, penetration testing, red teaming or a closely related field.
• Extensive experience with conducting code audits to identify and remediate security issues.
• Experience with binary exploitation.
• Mastery of AWS & attack techniques and configuration weaknesses.
• Strong understanding of adversary tactics and frameworks like MITRE ATT&CK.
• In-depth knowledge of web application security, including OWASP Top 10 and ASVS.
• Proficiency using offensive security tools such as Burp Suite, nuclei and similar frameworks.
• Strong programming skills in Python, Go, or similar languages, with proven experience developing tools or automation.
• Excellent written and verbal communication skills with the ability to present complex technical details clearly.
• A natural attacker mindset, creative and risk-aware across complex systems.

Responsibilities

• Emulate adversaries to surface vulnerabilities across infrastructure and ecosystem tools.
• Run hands-on penetration tests and lead red team exercises with blue team partners.
• Shape design, launch, protection and compliance for infrastructure powering millions of users.
• Conduct comprehensive code audits across internal apps and infrastructure.
• Perform penetration tests across AWS, infrastructure, and backend apps.
• Collaborate with detection, threat intel and IR to improve controls and coverage.
• Build and maintain offensive security tools and automation.

Skills

5+ years in offensive security

Code audits

Binary exploitation

AWS & attack techniques

MITRE ATT&CK

Web application security

Burp Suite, nuclei

Python / Go programming

Strong communication

Attacker mindset

Tools

Burp Suite

nuclei

Job description

Offchain is seeking a Senior Security Engineer to emulate adversaries, run penetration tests and lead red team exercises across our infrastructure and ecosystem tools. You will shape how we design, launch, protect, and ensure SOC 2 readiness for critical systems, including cloud and backend applications.

You’ll collaborate with detection, threat intel and incident response teams, develop offensive tooling, and mentor junior engineers while staying ahead of evolving threats and attack methods in