Senior Threat & Offensive Security Engineer (AI-Driven)

Valon; San Francisco (CA); On-site; USD 180,000 - 230,000; Full time

Benefits offered by this job

Equity stake

401k plan

Health benefits

Commuter benefits

Team orientations & development

Flexible time off

Baby bonding leave

Job summary

Valon is hiring a Senior Security Engineer, Threat & Offensive Security to scale offensive security and threat operations. You will identify weaknesses, test controls, and automate security workflows using AI and modern tools.

Collaboration with cross-functional teams is essential to safeguard key assets. Ideal candidates have 5+ years in security roles, hands-on testing with Burp, Metasploit, Nmap, and Cobalt Strike, plus experience with cloud environments like AWS and GCP.

Qualifications

• Minimum 5 years in security engineering, red team, threat management or related roles.
• Bachelor's degree in CS, InfoSec, or related field; security certifications preferred.
• Experience with security testing tools and frameworks; cloud security experience is a plus.

Responsibilities

• Drive and conduct security testing and penetration tests across applications, infrastructure, and networks.
• Manage and implement security testing tools and frameworks to simulate real-world attacks.
• Design and implement AI-enabled workflows to scale security testing and threat operations.
• Manage threat intelligence to anticipate threats and adjust defenses.
• Collaborate with external pentesting firms for periodic reviews.
• Review new systems and architectures for security risks and provide recommendations.
• Lead remediation with Eng, IT, Product and other teams.

Skills

Security engineering

Red team

Threat intelligence

Incident response

AI automation

Cloud security

MITRE ATT&CK

SIEM/EDR

Education

Bachelor's degree in CS or related

Security certifications (CISSP/CEH/OSCP)

Tools

Burp Suite

Metasploit

Nmap

Cobalt Strike

GCP

AWS

Job description

Valon is hiring a Senior Security Engineer, Threat & Offensive Security to scale offensive security and threat operations. You will identify weaknesses, test controls, and automate security workflows using AI and modern tools.

Collaboration with cross-functional teams is essential to safeguard key assets. Ideal candidates have 5+ years in security roles, hands-on testing with Burp, Metasploit, Nmap, and Cobalt Strike, plus experience with cloud environments like AWS and GCP.