Senior Offensive Security Engineer — BAS & Threat Simulation

Humana Inc; Remote; USD 117,000 - 162,000; Full time

Job summary

A leading healthcare company is seeking a Senior Engineer, Offensive Security to conduct threat actor simulations and develop security strategies. This role involves significant autonomy in managing security initiatives, utilizing Python for automation, and collaborating with a specialized security team. The candidate should have at least 3 years of offensive security experience. This remote position offers competitive pay and benefits, and aims to strengthen the company's security posture through proactive threat assessments.

Benefits

Competitive salary

401(k) retirement savings plan

Paid time off

Training budgets

Qualifications

• Minimum 3 years of experience in offensive security roles such as Red Team, Penetration Testing, or Bug Bounty programs.
• Intermediate to advanced proficiency in Python programming or equivalent languages.
• Experience with major Cloud Service Providers, including AWS, GCP, and Azure.
• Demonstrated ability to work autonomously on complex assignments.

Responsibilities

• Run high-fidelity threat-actor and control-validation campaigns.
• Build and execute detailed threat-actor campaigns using the BAS platform.
• Draft actionable findings for SOC/IR documentation.
• Collaborate with the CTI team on priority TTPs.

Skills

Offensive Security

Python programming

Independent problem-solving

Cloud Service Providers

Threat Intelligence

Tools

AWS

GCP

Azure

Microsoft Defender for Endpoint

CrowdStrike

SentinelOne

Job description

A leading healthcare company is seeking a Senior Engineer, Offensive Security to conduct threat actor simulations and develop security strategies. This role involves significant autonomy in managing security initiatives, utilizing Python for automation, and collaborating with a specialized security team. The candidate should have at least 3 years of offensive security experience. This remote position offers competitive pay and benefits, and aims to strengthen the company's security posture through proactive threat assessments.