Senior Vulnerable-Machine Lab Engineer

Deel; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

OffSec is seeking a Senior Vulnerable Machine Engineer to design and build labs that train cybersecurity professionals. You will craft realistic attack paths across Windows and Linux in scalable lab environments, with an emphasis on reproducibility and deterministic behavior.

The role involves mentoring and collaboration across lab and content teams. Remote-friendly and globally distributed, this position requires OSCP/OSCE/OSWE (or equivalent) and strong scripting, IaC, and security content

Qualifications

• OSCP minimum and OSCE3 preferred (or equivalent OffSec certs).
• Bachelor’s degree or equivalent practical experience in a related field.
• Active Directory and Cloud attack-path experience required.

Responsibilities

• Design and build vulnerable-lab environments and VMs across Linux/Windows.
• Create realistic attack scenarios aligned with learning objectives.
• Ensure reproducibility, deterministic behavior, and reliable resets.
• Collaborate with Lab and Content teams to align vectors and content.
• Mentor engineers on build standards, documentation, and reviews.

Skills

Active Directory

Cloud attack-paths

Python scripting

PowerShell scripting

Bash scripting

Infrastructure as Code

Version control

Penetration testing

Bug bounty hunting

Labs automation

Education

Bachelor’s Degree in Systems Engineering / Computer Science / Information Assurance

OffSec OSCP/OSCE/OSWE or 300-level certs

Tools

Terraform

Ansible

Git

Job description

OffSec is seeking a Senior Vulnerable Machine Engineer to design and build labs that train cybersecurity professionals. You will craft realistic attack paths across Windows and Linux in scalable lab environments, with an emphasis on reproducibility and deterministic behavior.

The role involves mentoring and collaboration across lab and content teams. Remote-friendly and globally distributed, this position requires OSCP/OSCE/OSWE (or equivalent) and strong scripting, IaC, and security content