Senior Offensive Security Engineer — Remote Red Team Lead

Group 1001 Resources, LLC; United States; Remote; USD 200,000 - 270,000; Full time

Benefits offered by this job

Health insurance

401K with matching

Wellness program

Life Insurance

Job summary

Group 1001 Resources, LLC is seeking a hands-on Senior Offensive Security Engineer to lead penetration testing and red team operations across cloud, endpoint, application, and API environments. You will own the offensive testing program and drive improvements to security testing throughout the lifecycle.

You will mentor other engineers, coordinate with development teams, and manage the private bug bounty program while reporting outcomes to senior leadership.

Qualifications

• 8+ years hands-on experience in penetration testing, red teaming, or equivalent offensive security roles.
• Experience testing cloud environments (Azure/AWS/GCP), endpoints, web/desktop apps, and APIs.
• Experience conducting full-scope red team and purple team exercises.
• Vulnerability triage with guidance for remediation across teams.
• Experience managing or contributing to a bug bounty program.
• Familiarity with attack surface management platforms and external exposure reduction.
• Knowledge of adversary TTPs and modern detection/response capabilities.
• Excellent written and verbal communication for executives and non-technical stakeholders.

Responsibilities

• Plan, scope, execute, and report on penetration tests across cloud and on-prem environments with remediation guidance.
• Partner with development teams to integrate testing into release cycles.
• Lead quarterly red team and purple team exercises to test detection and response.
• Manage the private bug bounty program including triage and remediation coordination.
• Operate attack surface monitoring and drive remediation to closure.
• Oversee external testing vendors and annual external penetration test scope.
• Validate remediation through retesting and track findings to closure.
• Translate offensive findings into defensive improvements with cross-team collaboration.
• Develop and refine offensive tooling, techniques, and processes.
• Track and report program metrics and risk reductions to leadership.
• Provide technical leadership and mentorship to additional team members.

Skills

Penetration testing

Red teaming

Cloud security

Vulnerability triage

Bug bounty management

Communication

Education

OSCP/OSWE/OSCE or GXPN

Tools

Cobalt Strike

Burp Suite

Custom C2 frameworks

Job description

Group 1001 Resources, LLC is seeking a hands-on Senior Offensive Security Engineer to lead penetration testing and red team operations across cloud, endpoint, application, and API environments. You will own the offensive testing program and drive improvements to security testing throughout the lifecycle.

You will mentor other engineers, coordinate with development teams, and manage the private bug bounty program while reporting outcomes to senior leadership.