Senior Offensive Security Engineer (Fully Remote)

Group 1001; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401K with company matching

Job summary

Group 1001 is seeking an experienced offensive security leader to own penetration testing, red teaming, and the private bug bounty program. You will align testing with development cycles to reduce real-world risk and improve threat detection across cloud, endpoints, web, and APIs.

Reporting to the AVP of Security Lifecycle & Architecture, you will collaborate with multiple security and engineering teams to embed security testing into every delivery cycle, enabling safer production deployments

Qualifications

• Plan, scope, execute, and report penetration tests across cloud, endpoint, web, and API environments.
• Lead private bug bounty program and continuous attack surface monitoring.
• Collaborate with development teams to integrate security testing into delivery cycles.
• 8+ years hands-on penetration testing or red teaming experience.
• Strong understanding of adversarial TTPs and modern detection capabilities.
• Excellent written and verbal communication for executive reporting.
• Comprehensive health, dental, and vision insurance; life and disability coverage.
• 401K plan with company matching contributions.

Responsibilities

• Plan, scope, execute, and report on penetration tests across cloud, endpoint, web, and API environments.
• Manage the private bug bounty program and continuous attack surface monitoring.
• Partner with development teams to integrate security testing into their delivery cycles.

Skills

Penetration testing

Red teaming

Security testing

Executive communication

Tools

Bug bounty platforms

Attack surface monitoring tools

Job description

• You will be the technical owner of offensive security: leading penetration tests, red team exercises, and bug bounty programs.
• You will reduce real-world risk and improve detection by aligning security testing with development cycles.
• This role reports to AVP of Security Lifecycle & Architecture and collaborates with multiple security teams.

What You'll Do:

• Plan, scope, execute, and report on penetration tests across cloud, endpoint, web, and API environments.
• Manage the private bug bounty program and continuous attack surface monitoring.
• Partner with development teams to integrate security testing into their delivery cycles.

What We’re Looking For:

• 8+ years of hands-on penetration testing or red teaming experience.
• Strong understanding of adversarial TTPs and modern detection capabilities.
• Excellent written and verbal communication for executive reporting.
• Comprehensive health, dental, and vision insurance.
• Basic and supplemental life insurance, short- and long-term disability.
• 401K plan with company matching contributions.

Group 1001

Group 1001 is a consumer-centric, technology-driven family of insurance companies that delivers value by combining financial strength with deep insurance expertise. The culture emphasizes collaboration, communication, risk management, and striving for outcomes, fostering a supportive work environment.