Staff Offensive Security Engineer: Red Team & Cloud

Greenlight Financial Technology; United States; Hybrid; USD 165,000 - 200,000; Full time

Benefits offered by this job

Medical benefits

Dental & Vision

401k match

Unlimited PTO

Parental leave

Hybrid/Remote work

Professional development

Mental health resources

Equity rewards

Job summary

Greenlight is seeking a Staff Offensive Security Engineer to lead continuous security validation across consumer apps, cloud infrastructure, and internal environments. You will drive strategy, perform multi-stage adversary simulations, and research high-risk areas to prevent threats.

You will partner with DevOps to implement automated guardrails, support incident response, and mentor engineers, all while promoting a security-first culture across R&D.

Qualifications

• 8+ years of offensive security experience, with red team or pentest track record.
• Deep AWS security architecture knowledge, IAM bypass techniques, container escapes.
• Experience reviewing Node.js, Python, or Go code for security weaknesses.
• Ability to script in Python, Bash, or Go to automate testing in CI/CD.

Responsibilities

• Define the long-term offensive security vision and validation strategy.
• Design and execute complex red teaming and multi-stage simulations across cloud, mobile, and internal networks.
• Lead deep-dive vulnerability research into high-risk areas.
• Collaborate with DevOps to build automated security guardrails and self-healing infrastructure.
• Support detection and response with purple team exercises and improved monitoring.
• Mentor senior and mid-level engineers to foster security-minded development.

Skills

Expert-level Offensive Security

Cloud Native Security (AWS/Kubernetes)

Application Security & code review

Automation & scripting (Python/Bash/Go

Strategic communication with execs

OSCP/OSCE or GXPN

Ethical hacking mindset

Collaboration across R&D

Ownership mindset

Tools

AWS

Kubernetes

CI/CD tools

Job description

Greenlight is seeking a Staff Offensive Security Engineer to lead continuous security validation across consumer apps, cloud infrastructure, and internal environments. You will drive strategy, perform multi-stage adversary simulations, and research high-risk areas to prevent threats.

You will partner with DevOps to implement automated guardrails, support incident response, and mentor engineers, all while promoting a security-first culture across R&D.