Senior AWS Penetration Tester — Red Team Lead

Offchain Labs; United States; Remote; USD 170.000 - 230.000; Vollzeit

Benefits dieser Stelle

Remote-first global workforce

NY office

Professional reimbursement program

Health coverage (US)

401k with company match (US)

Wellness stipend

Home office setup

Zusammenfassung

Offchain Labs is seeking a Senior Security Engineer to emulate adversaries, run red-team exercises, and strengthen detection and response across our infrastructure and ecosystem tools.

You will conduct code audits and penetration tests, collaborate across security functions, and build offensive tooling to accelerate assessments. The role emphasizes mentorship and staying ahead of threats in a remote-first, security-focused environment.

Qualifikationen

• 5+ years in offensive security, pentesting, red teaming, or related field.
• Experience conducting code audits to remediate security issues.
• Experience with binary exploitation.
• Mastery of AWS and attack techniques and configuration weaknesses.
• Strong knowledge of adversary tactics and frameworks like MITRE ATT&CK.
• Deep knowledge of web application security (OWASP Top 10, ASVS).
• Proficiency with offensive security tools like Burp Suite and nuclei.
• Strong Python or Go programming skills for tool development.

Aufgaben

• Conduct comprehensive code audits across internal applications and infrastructure.
• Perform comprehensive penetration tests across AWS, infrastructure, and backend apps.
• Collaborate with detection engineering, threat intelligence, and incident response groups to review controls and improve coverage.
• Build, maintain, and evolve offensive tools and automation frameworks to speed assessments.
• Offer offensive security expertise during incident investigations, including log analysis and root-cause reviews.
• Stay current on evolving threats and share research internally and with the security community.
• Own offensive security projects from start to finish and mentor junior teammates.

Kenntnisse

Offensive security

Penetration testing

Code audits

MITRE ATT&CK

Web security

Python

Nuclei

Tools

Burp Suite

Nuclei

Jobbeschreibung

Offchain Labs is seeking a Senior Security Engineer to emulate adversaries, run red-team exercises, and strengthen detection and response across our infrastructure and ecosystem tools.

You will conduct code audits and penetration tests, collaborate across security functions, and build offensive tooling to accelerate assessments. The role emphasizes mentorship and staying ahead of threats in a remote-first, security-focused environment.