Senior Offensive Security Engineer – Commercial Apps

ECOLAB

Naperville (IL)

On-site

USD 101,000 - 152,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Ecolab is seeking a Senior Offensive Security Engineer, Commercial Products to lead hands-on security testing across our web, mobile, API, cloud, and IoT offerings. You will mentor engineers, shape testing methods, and drive risk-based remediation with product teams.

Work closely with security, engineering, architecture, and business stakeholders to identify vulnerabilities before they reach customers and to elevate the security maturity of our commercial products.

Qualifications

Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.
5+ years of hands-on cybersecurity/ offensive security experience.
Experience performing authorized security testing of web, mobile, APIs, cloud, and IoT devices.
Experience mentoring engineers and coordinating testing activities.
Familiarity with Azure, AWS, or GCP and security testing across CI/CD environments.
Proficiency with security testing tools (Snyk, Wiz, Burp Suite, ZAP, GitHub Advanced Security).
Knowledge of secure SDLC, DevSecOps, and vulnerability management.

Responsibilities

Perform hands-on offensive security testing across products and platforms.
Plan, scope, and execute assessments to identify exploitable vulnerabilities and misconfigurations.
Mentor engineers and contribute to testing playbooks and reporting standards.
Translate findings into actionable remediation and risk-based priorities.
Collaborate with product security, cloud, IoT, and engineering teams.
Conduct authorized testing of IoT and embedded devices where appropriate.
Prepare clear reports detailing impact, exploitability, and remediation steps.
Present findings to engineers and non-technical stakeholders.