Senior Offensive Security Engineer: Hands-on Red Team

RXinsider LTD.; Naperville, Northern (IL, KY); Hybrid; USD 101,000 - 152,000; Full time

Job summary

Ecolab is seeking an experienced security professional to perform hands-on offensive security testing across web, mobile, APIs, cloud services, IoT, and embedded devices. You will plan assessments, mentor engineers, and translate findings into prioritized remediation actions that align with business risk.

The role requires strong expertise in offensive security, security tooling, and secure SDLC practices, with the ability to collaborate with product, engineering, and cloud teams to improve

Qualifications

• Bachelor's degree in cybersecurity or related technology field.
• 5+ years of hands-on cybersecurity, application security, or related field.
• Experience performing authorized testing of web, mobile, APIs, cloud, and/or IoT products.
• Experience supporting offensive security engagements, vulnerability assessments, and security reporting.
• Experience mentoring engineers and coordinating testing activities while remaining hands-on.
• Experience with Azure; familiarity with AWS/GCP cloud security concepts.
• Experience with security testing tools and practices including SAST, SCA, DAST, API testing, and secure code review concepts.
• Familiarity with secure SDLC, DevSecOps, CI/CD pipelines, IAM, encryption, and secrets management.
• Understanding of IoT, embedded, industrial, or field-deployed technology security considerations.
• Familiarity with OWASP, CIS, NIST, ISO 27001, SOC 2, and secure SDLC practices.
• Strong interpersonal, analytical, problem-solving, and communication skills.
• Ability to communicate findings clearly to technical and non-technical stakeholders.
• Ability to accommodate a flexible work schedule for global activities.

Responsibilities

• Perform hands-on offensive security testing across Ecolab products (web, mobile, APIs, cloud, IoT, embedded devices).
• Plan, scope, and execute security assessments to identify vulnerabilities and misconfigurations.
• Mentor engineers and document findings; contribute to repeatable testing methods and reporting standards.
• Translate testing results into remediation actions and risk-based priorities.
• Collaborate with product/security teams to drive practical remediation and governance.
• Conduct safe testing of IoT/industrial equipment, including field devices and PLC/IPC interfaces.
• Utilize security tools (Snyk, Wiz, Burp Suite, ZAP, GitHub AS) to identify and document issues.
• Validate vulnerabilities from various sources and prepare clear, actionable reports.
• Present findings to engineering and leadership with business context and risk.

Skills

Offensive security

Penetration testing

Cloud security

IoT security

DevSecOps

Threat modelling

Communication

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Tools

Snyk

Wiz

Burp Suite

OWASP ZAP

GitHub Advanced Security

Nmap

Horizon3 NodeZero

DAST tooling

Job description

Ecolab is seeking an experienced security professional to perform hands-on offensive security testing across web, mobile, APIs, cloud services, IoT, and embedded devices. You will plan assessments, mentor engineers, and translate findings into prioritized remediation actions that align with business risk.

The role requires strong expertise in offensive security, security tooling, and secure SDLC practices, with the ability to collaborate with product, engineering, and cloud teams to improve