Senior Offensive Security Engineer — Cloud & App Red Team

Group 1001; United States; A distancia; USD 200.000 - 270.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401K with matching

Employee Assistance Program

Wellness programs

Descripción de la vacante

Group 1001 is seeking a hands-on Senior Offensive Security Engineer to lead penetration testing and red team operations across cloud, endpoints, apps, and APIs. You will own the offensive testing program, drive bug bounty initiatives, and reduce external attack surface while embedding with development teams to mature SDLC security.

You will coordinate quarterly red/purple team exercises, manage third-party testing vendors, and translate findings into concrete defensive improvements across

Formación

• 8+ years hands-on experience in offensive security roles.
• Experience testing Azure, AWS, GCP, endpoints, web/desktop apps, and APIs.
• Experience leading red team and purple team exercises.
• Ability to guide remediation with multiple stakeholders.
• Experience managing or contributing to a bug bounty program.
• Familiarity with attack surface management platforms.
• Understanding of TTPs and modern detection/response.

Responsabilidades

• Plan, scope, execute, and report on penetration tests across cloud and on-prem environments.
• Lead quarterly red team and purple team exercises.
• Manage private bug bounty program including triage and remediation coordination.
• Oversee external penetration tests and vendor relationships.
• Translate offensive findings into defensive improvements with architecture and security teams.
• Develop tooling and processes to improve program effectiveness.
• Track program metrics and report risk reductions to leadership.
• Provide mentorship to junior security engineers.

Conocimientos

Penetration testing

Red team operations

Cloud environments

Bug bounty program management

Vulnerability triage

Threat detection and response

Executive risk communication

Herramientas

Cobalt Strike

Burp Suite

Custom tooling

Descripción del empleo

Group 1001 is seeking a hands-on Senior Offensive Security Engineer to lead penetration testing and red team operations across cloud, endpoints, apps, and APIs. You will own the offensive testing program, drive bug bounty initiatives, and reduce external attack surface while embedding with development teams to mature SDLC security.

You will coordinate quarterly red/purple team exercises, manage third-party testing vendors, and translate findings into concrete defensive improvements across