Senior Offensive Security Engineer

Synopsys Inc; Morrisville (NC); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Synopsys is seeking a senior security test engineer to lead penetration testing across its applications and infrastructure, with a focus on risk-based remediation and collaboration with engineering teams. You will build autonomous security testing solutions using AI, perform attack surface reviews, and translate findings into actionable guidance for different stakeholders.

The role sits in the Attack Surface Management team and offers hybrid or onsite options across office locations, including

Qualifications

• 8+ years of hands-on penetration testing in enterprise environments.
• Experience building autonomous security solutions using AI/ML.
• Proficiency with security testing tools (Burp Suite, Metasploit, Cobalt Strike, BloodHound).
• Cloud security assessments across AWS/Azure/GCP with best practices.
• Familiarity with CVSS, OWASP Top 10, MITRE ATT&CK and practical testing.

Responsibilities

• Conduct penetration testing across applications and infrastructure, guiding remediation with engineers.
• Build autonomous security testing solutions using AI to scale detection.
• Perform attack surface reviews and recommend defense strategies.
• Analyze test data to support root cause analysis with development teams.
• Monitor threat intelligence sources and align testing priorities with risks.
• Collaborate with security, engineering, and cloud teams on security initiatives.
• Deliver clear assessment reports adapted for technical and executive audiences.

Skills

Penetration testing

AI security tooling

Security reporting

Collaboration

Threat modeling

Education

Bachelor's degree in CS/Cybersecurity

Tools

Burp Suite

Metasploit

Cobalt Strike

BloodHound

AWS

Azure

GCP

Job description

This position requires access to or use of information which is subject to export restrictions, including the International Traffic in Arms Regulations (ITAR). All applicants for this position must be "U.S. Persons" within the meaning of the ITAR. "U.S. Persons" include U.S. Citizens, U.S. Lawful Permanent Residents (i.e. 'Green Card Holders'), Political Asylees, Refugees or other protected individuals as defined by 8 U.S.C. 1324b(a)(3)’.

This position can be based out of any of our office locations in Austin, TX; Madison, WI; Morrisville, NC; or Hillsboro, OR, with a hybrid or onsite work arrangement.

We Are

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

You Are

You have spent years learning how systems break, and you have gotten good at finding those weak points before someone else does. You approach security testing with curiosity and rigor, not just running scans but understanding the context behind what you find. When you identify a vulnerability, you think about the business impact and how to explain it in a way that helps teams actually fix it.

You understand that effective security work is as much about collaboration as it is about technical skill. You have worked with engineering teams who do not live in security every day, and you have learned how to communicate findings in a way that builds trust rather than defensiveness. You ask good questions, you listen, and you help people understand not just what is broken but why it matters.

What You'll Be Doing

• Conduct penetration testing across Synopsys applications and infrastructure, identifying vulnerabilities and working with engineering and operations teams to develop practical remediation plans
• Build and deploy autonomous security testing solutions using AI to help scale vulnerability detection across the organization, exploring new ways to improve coverage and efficiency
• Perform attack surface reviews of critical systems, recommending defense strategies that help prevent exploits and improve overall security resilience
• Analyze security test data to support root cause analysis, collaborating with development and infrastructure teams to understand vulnerabilities and address underlying issues
• Monitor vulnerability disclosure feeds and threat intelligence sources, helping the team stay informed about emerging threats and prioritize testing efforts accordingly
• Work with cross-functional security, engineering, and cloud operations teams on security initiatives, aligning testing activities with broader organizational goals
• Deliver clear, actionable assessment reports to stakeholders, translating technical findings into language that makes sense for different audiences across the organization

The Impact You Will Have

• Help reduce security risk across Synopsys infrastructure and applications by identifying vulnerabilities and supporting teams in addressing them effectively
• Contribute to building security capabilities that can operate at greater scale and speed through AI-driven testing approaches
• Support stronger defenses across cloud and on-premises environments by recommending security controls based on real-world testing insights
• Help engineering teams respond more effectively to vulnerabilities by providing clear analysis and practical remediation guidance
• Improve organizational awareness of emerging threats by translating external intelligence into relevant testing priorities and defensive considerations
• Contribute your testing expertise to help shape security practices and standards that reflect real-world attack patterns and risks
• Play a role in protecting the intellectual property and infrastructure that supports semiconductor innovation for customers worldwide

What You'll Need

• 8+ years of hands-on experience performing penetration testing at both application and infrastructure levels, ideally in enterprise environments
• Experience building autonomous security solutions, particularly using AI or machine learning to enhance vulnerability detection and testing workflows
• Strong working knowledge of security testing and analysis tools such as Burp Suite, Metasploit, Cobalt Strike, BloodHound, or similar platforms
• Experience conducting security assessments in cloud environments including AWS, Azure, or GCP, with understanding of cloud-specific security considerations
• Solid knowledge of vulnerability frameworks including CVSS, OWASP Top 10, MITRE ATT&CK, and how to apply them in practical testing scenarios
• Software development experience in C/C++, Java, or Python, with ability to write scripts, automation tools, and work with code at a technical level
• Bachelor's degree in Computer Science, Cybersecurity, or equivalent practical experience; certifications such as OSCP, OSCE, or HTB CPTS are helpful but not required

Who You Are

• You can explain a security vulnerability to engineers in a way that helps them understand the issue and feel supported in fixing it, rather than blamed for creating it
• You approach testing with thoroughness, taking time to explore beyond surface-level findings because you know the most important issues often require deeper investigation
• You are comfortable working independently on complex assessments, but you also value collaboration and know when to reach out to colleagues for input or support
• You stay current on security trends and emerging threats because you are genuinely interested in how the landscape evolves and what that means for defense
• You can write technical reports that developers can use and executive summaries that non-technical stakeholders can understand and act on
• You handle sensitive information with discretion and understand the importance of confidentiality in security work

The Team You'll Be Part Of

You will join the Synopsys Attack Surface Management team, a group focused on proactively identifying and managing the remediation of security vulnerabilities across Synopsys' global infrastructure, applications, and services. The team works closely with engineering, cloud operations, and product security teams to support security initiatives and enhance the overall security posture of the company. Your work will directly influence how Synopsys secures the tools and platforms that power semiconductor innovation worldwide.

Rewards and Benefits

We offer a comprehensive range of health, wellness, and financial benefits to cater to your needs. Our total rewards include both monetary and non-monetary offerings. Your recruiter will provide more details about the salary range and benefits during the hiring process.

At Synopsys, we want talented people of every background to feel valued and supported to do their best work. Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, age, military veteran status, or disability.

In addition to the base salary, this role may be eligible for an annual bonus, equity, and other discretionary bonuses. Synopsys offers comprehensive health, wellness, and financial benefits as part of a competitive total rewards package. The actual compensation offered will be based on a number of job-related factors, including location, skills, experience, and education. Your recruiter can share more specific details on the total rewards package upon request.