Senior Red Team Security Engineer - Remote

Framework Ventures; Sterling (VA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Remote-first

Annual offsite

Professional reimbursement program

Medical, dental & vision coverage

401k with company match

Wellness stipend

Home office setup

Job summary

Offchain Labs is seeking a Senior Security Engineer (Offensive) for a remote role focused on identifying and mitigating security risks in our blockchain infrastructure. You will perform hands-on testing, build offensive tooling, and collaborate with incident response teams to improve detection and prevention.

You will work with AWS environments, attack frameworks, and security controls, communicating findings clearly and driving risk-based security improvements across the platform.

Qualifications

• 5+ years of offensive security experience.
• Mastery of AWS and attack techniques.
• Strong knowledge of MITRE ATT&CK.
• Proficient with Burp Suite or Cobalt Strike.

Responsibilities

• Emulate adversaries to surface vulnerabilities across infrastructure and ecosystem tools.
• Run hands-on penetration tests and lead red team exercises.
• Collaborate with blue team partners to test and strengthen detection and response capabilities.
• Develop and maintain offensive security tools and automation frameworks.
• Provide offensive security expertise during incident investigations, including log analysis and root-cause reviews.
• Mentor junior team members and foster a learning culture.

Skills

Offensive security

Penetration testing

Red teaming

MITRE ATT&CK

Web security

Python/Go

Tools

Burp Suite

Cobalt Strike

Job description

Offchain Labs is seeking a Senior Security Engineer (Offensive) for a remote role focused on identifying and mitigating security risks in our blockchain infrastructure. You will perform hands-on testing, build offensive tooling, and collaborate with incident response teams to improve detection and prevention.

You will work with AWS environments, attack frameworks, and security controls, communicating findings clearly and driving risk-based security improvements across the platform.