Senior Offensive Security Lead for Web, Cloud & IoT Tests

RXinsider LTD.; Naperville (IL); On-site; USD 121,000 - 181,000; Full time

Job summary

Ecolab is seeking a Lead Offensive Security Engineer to drive hands-on testing across web, mobile, APIs, cloud, IoT, and embedded devices. You will also lead a small internal team, define engagement scope, and ensure remediation validation.

You will partner with product security, engineering, cloud, and business stakeholders to translate findings into actionable remediation and risk-based priorities, while staying current with security trends.

Qualifications

• Bachelor’s degree in a technology field or related discipline.
• 8+ years in cybersecurity, offensive security, or product security roles.
• Experience leading offensive security engagements and reporting.
• Hands-on testing of web, mobile, APIs, cloud, and IoT products.
• Familiar with secure SDLC, DevSecOps, and CI/CD concepts.

Responsibilities

• Lead and perform hands-on offensive security testing across products and platforms.
• Plan scope, identify vulnerabilities, and prioritize remediation.
• Lead a small security team while remaining involved in testing and analysis.
• Develop testing playbooks, engagement standards, and risk models.
• Communicate findings to engineers and stakeholders to drive remediation.

Skills

Leadership

Cloud security concepts

Threat modeling

Communication

Problem-solving

Secure coding concepts

Education

Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field

Tools

Snyk

Wiz

Burp Suite

OWASP ZAP

GitHub Advanced Security

Nmap

Horizon3 NodeZero

DAST tooling

Job description

Ecolab is seeking a Lead Offensive Security Engineer to drive hands-on testing across web, mobile, APIs, cloud, IoT, and embedded devices. You will also lead a small internal team, define engagement scope, and ensure remediation validation.

You will partner with product security, engineering, cloud, and business stakeholders to translate findings into actionable remediation and risk-based priorities, while staying current with security trends.