Senior Offensive Security Engineer — Red Team & Purple Team

Shutterfly; Phoenix (AZ); Remote; USD 130,000 - 180,000; Full time

Job summary

Shutterfly is seeking a Senior Application Security Engineer (Offensive / Red Team) to lead offensive engagements and drive Purple Team outcomes across critical apps and infrastructure. You will educate developers on secure coding, mentor engineers, and partner with defense teams to strengthen the security program.

You will guide threat modeling, vulnerability management, and incident response while advancing offensive techniques with AI-enabled tooling and secure development practices.

Qualifications

• Bachelor's degree in computer science, cybersecurity, or equivalent experience.
• Experience leading offensive security work, red team engagements, or web app pen-testing.
• Proficient in Java and code review across major languages.
• Strong analytical skills with a risk-based approach.
• Advanced user of Burp Suite Pro; custom extensions a plus.
• Excellent communication across security, engineering, and business teams.

Responsibilities

• Lead Red Team engagements against applications and infrastructure.
• Collaborate with Blue Team to drive Purple Team improvements.
• Augment offensive work with AI/LLM tooling for reconnaissance and testing.
• Identify and drive remediation of vulnerabilities with engineering teams.
• Lead threat modeling and risk assessments for new and existing apps.
• Support incident response with offensive expertise to understand attacker activity.
• Help define secure SDLC practices and perform security code reviews.
• Advise on secure system design and mentor junior engineers.

Skills

Offensive security

Penetration testing

Burp Suite Pro

Java

Communication

Risk-based security

Education

Bachelor's degree in CS or related field

Tools

Burp Suite Pro

Job description

Shutterfly is seeking a Senior Application Security Engineer (Offensive / Red Team) to lead offensive engagements and drive Purple Team outcomes across critical apps and infrastructure. You will educate developers on secure coding, mentor engineers, and partner with defense teams to strengthen the security program.

You will guide threat modeling, vulnerability management, and incident response while advancing offensive techniques with AI-enabled tooling and secure development practices.