Senior Offensive Security Engineer - Remote

Weight Watchers; United States; Remote; USD 180,000 - 195,000; Full time

Benefits offered by this job

Annual bonus

Benefits package

Job summary

Weight Watchers seeks a Senior Security Engineer to perform offensive security testing on our TypeScript applications and AWS infrastructure, while contributing to remediation and secure-by-default libraries. You’ll drive continuous testing with AI-assisted workflows and coordinate with third-party engagements.

The role combines offensive work (70%) with remediation (30%), emphasizes scalable security tooling, and offers a comprehensive benefits package with an annual bonus.

Qualifications

• 6+ years in security or software engineering, with 3+ years hands-on offensive work (pentesting, red/purple team, or application security testing).
• Hands-on AWS security experience: IAM privilege escalation, cross-account/role trust abuse, SSRF to metadata service.
• Production software engineering experience in TypeScript/Node.js; shipped fixes through code review, tests and CI/CD.
• Deep knowledge of web and API vulnerabilities (OWASP Top 10, API Security Top 10) and how to fix them in code.
• Experience safely testing live production systems under defined engagement rules.
• Experience with SAST, DAST and SCA tools; tuning and triaging outputs.
• Hands-on experience with agentic workflows for offensive security; knowledge of when they fail.

Responsibilities

• Plan and run red team, purple team and application penetration tests mapped to MITRE ATT&CK.
• Test TypeScript web apps and APIs for OWASP Top 10 and API Top 10 issues.
• Remediate findings with PRs and implement secure-by-default libraries and patterns.
• Operate AI-assisted security tooling and guardrails; ensure human review for changes.
• Manage third-party pentest and red team engagements from rules of engagement to retest.
• Test and validate identity stack and access controls; review PRs for security.

Skills

Offensive security

AWS security

TypeScript/Node.js

Web/API security

Security tooling

Penetration testing

AI-assisted security

Tools

Burp Suite

Semgrep

Pacu

Caldera

Prowler

Bugcrowd tooling

Job description

Weight Watchers seeks a Senior Security Engineer to perform offensive security testing on our TypeScript applications and AWS infrastructure, while contributing to remediation and secure-by-default libraries. You’ll drive continuous testing with AI-assisted workflows and coordinate with third-party engagements.

The role combines offensive work (70%) with remediation (30%), emphasizes scalable security tooling, and offers a comprehensive benefits package with an annual bonus.