Senior AWS Security & Red Team Engineer

Offchain; United States; On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Remote‑first workforce

Conference reimbursement

Medical, dental & vision coverage

401k retirement plan + company match

Wellness stipend

Home office setup

Job summary

Offchain is building a movement in blockchain security, shaping scalable and secure infrastructure for millions of users and applications. We seek a Senior Security Engineer to lead offensive testing, build tools, and mentor teammates as we strengthen detection and response across our ecosystem.

You will run audits, conduct cloud and backend pentests, and collaborate across incident response to reduce risk and improve SOC2 readiness. Join a remote-first team with a strong security culture.

Qualifications

• 5+ years of experience in offensive security, penetration testing, red teaming, or a closely related field.
• Experience with binary exploitation.
• Mastery of AWS & specific attack techniques and configuration weaknesses.
• Strong understanding of adversary tactics and frameworks like MITRE ATT&CK.
• In-depth knowledge of web application security, including OWASP Top 10, ASVS, and common vulnerability categories.
• Proficiency using offensive security tools such as Burp Suite, nuclei and similar frameworks.
• Strong programming skills in Python, Go, or similar languages, with proven experience developing tools or automation.
• Excellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations.
• A natural ability to think like an attacker - creative, determined, and skilled at assessing risk across complex systems.

Responsibilities

• Conduct code audits across a variety of internal applications and infrastructure.
• Conduct comprehensive penetration tests across cloud environments (AWS), infrastructure, and backend applications.
• Collaborate with detection engineering, threat intelligence, and incident response groups to review security controls, uncover coverage gaps, and enhance overall detection quality.
• Build, maintain, and evolve custom offensive tools, scripts, and automation frameworks to increase assessment speed.
• Offer offensive security expertise during incident investigations, including log analysis and root cause reviews.
• Keep up with evolving threats, vulnerabilities, and attack methods; share research internally and engage with the wider security community.
• Own offensive security projects from start to finish, mentor junior team members, and cultivate a culture of ongoing learning and knowledge exchange.

Skills

Offensive security

Penetration testing

Red teaming

AWS security

Code audits

Python

Go

Threat modeling

MITRE ATT&CK

Web app security

Tools

Burp Suite

Nuclei

OWASP ZAP

Job description

Offchain is building a movement in blockchain security, shaping scalable and secure infrastructure for millions of users and applications. We seek a Senior Security Engineer to lead offensive testing, build tools, and mentor teammates as we strengthen detection and response across our ecosystem.

You will run audits, conduct cloud and backend pentests, and collaborate across incident response to reduce risk and improve SOC2 readiness. Join a remote-first team with a strong security culture.