Senior Security Engineer (Threat & Offensive Security)

Valon Mortgage; United States; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation package

Generous PTO and holidays

Flexible work options (remote/ hybrid/

Health, dental, and vision insurance

Job summary

Valon Mortgage is seeking an experienced Senior Security Engineer, Threat & Offensive Security to join our growing team and help scale adversarial testing, threat hunting, and incident response across cloud and on-prem environments.

This role emphasizes AI-enabled automation, collaboration with engineering, and scalable playbooks designed to protect customer data and trust. A strong background in pen testing, risk management, and modern security tooling is required.

Qualifications

• Minimum 5 years in security engineering, pentesting or threat intelligence roles.
• Experience with security testing, monitoring, and response technologies.
• Cloud security experience in GCP or AWS.
• Strong knowledge of MITRE ATT&CK and security frameworks.

Responsibilities

• Drive and conduct security testing and pen tests across apps, infra, and networks.
• Design and implement AI-enabled workflows to scale security testing and threat ops.
• Manage and operationalize threat intelligence to anticipate threats.
• Collaborate with engineering and product teams to remediate vulnerabilities.
• Develop playbooks and incident response procedures.
• Monitor security alerts and respond to incidents.
• Partner with external pentesting firms for independent reviews.

Skills

Security testing

Threat intelligence

AI/automation

Incident response

Penetration testing

Cloud security

MITRE ATT&CK

Sighting/monitoring tools

Education

Bachelor's degree in Computer Science, Information Security, Technology, or related field

CISSP

CEH

OSCP

GPEN

GCIH

Tools

Burp Suite

Metasploit

Nmap

Cobalt Strike

SIEM

EDR

Job description

• As a key security member at Valon, you will help scale and strengthen our offensive security and threat operations, proactively identifying weaknesses in our systems, networks, and applications as the company continues to grow
• You will help ensure security is embedded across our environment and that we continue to safeguard our most critical assets and maintain the trust of our customers and stakeholders
• Drive and conduct security testing and penetration tests across applications, infrastructure, and networks to identify exploitable vulnerabilities
• Manage and implement security testing tools and frameworks to simulate real-world attacks and validate the effectiveness of existing security controls
• Design and implement AI-enabled workflows to scale security testing and threat related operations
• Manage and operationalize threat intelligence to anticipate emerging threats and adjust defenses proactively
• Partner with external pentesting firms for periodic, independent reviews
• Perform security reviews of new systems, features, architectures, and third-party integrations, providing actionable risk-based recommendations
• Collaborate with Engineering, IT, Product and other teams to remediate identified vulnerabilities and strengthen security controls
• Develop and refine playbooks, procedures, and standards for offensive security testing, threat monitoring, and incident response
• Monitor and manage security alerts and incidents, analyze data, and respond to security events
• Support operational activities including general security reviews, security monitoring, vendor security, issue remediation, security awareness, audit/compliance, and other processes

Benefits

• Compensation: You’ll receive a highly competitive compensation package with room to grow.
• Time Away: We offer a generous PTO program, sick time, and company holidays.
• Flexible Work: Remote, hybrid, or in-office. We’ve got it all and aim for you to work where it works. Where possible, we offer geographic flexibility.
• Health Benefits: Health, dental, and vision insurance are all company-sponsored to keep you healthy and strong.
• Parental Leave: Birthing and non-birthing parents receive 12 weeks of fully paid time to welcome a new child.

We are seeking an experienced and skilled Senior Security Engineer, Threat & Offensive Security to join our growing team!This position requires a deep understanding of adversarial techniques, security testing methodologies, threat intelligence, and incident response, along with the ability to collaborate with cross-functional teamsMinimum of 5 years in a security engineering, penetration testing, threat intelligence, or similar roles with relevant responsibilities and backgroundExperience with security testing, monitoring, and response technologies (threat intelligence platforms, vulnerability scanners, SIEM, EDR, or similar)Knowledge of cloud environmentsRelevant security certifications (e.g., CISSP, CEH, OSCP, GPEN, GCIH or similar)Bachelor’s degree in Computer Science, Information Security, Technology, or a related fieldImportantly, this role requires an AI and automation-first approach to security work, using modern tools to scale testing, threat management, and responseExperience or exposure to startup environments is a plusApplied knowledge of industry security and testing frameworks (OWASP, NIST, MITRE ATT&CK, CIS, SOC 2/ISO 27001 concepts)Ability to foster strong relationships and partner with stakeholders to drive remediation and resultsExcellent communication and collaboration skills, with the ability to explain technical findings and risk to both technical and non-technical stakeholdersExperience with cloud security and environments (GCP, AWS)Ability to work autonomously, lead projects, and navigate complex, ambiguous security investigationsExperience with SIEM, EDR, and other detection/monitoring platformsStrong understanding of common attack techniques, exploitation methods, and MITRE ATT&CK or relatedProficient in both manual and automated testing techniques, understanding when manual analysis is needed versus pure automated testingDemonstrated experience leveraging AI and automation to improve the efficiency and scalability of threat detection, testing, and response operationsHands-on experience with security testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap, Cobalt Strike, or similar)Proven experience in security engineering, red team, or threat management role, with a focus on penetration testing, security testing, threat intelligence, and/or incident response