Staff Offensive Security Engineer - Remote

Calance, Inc.; United States; Remoto; USD 175.000 - 200.000; Tempo pieno

Descrizione del lavoro

Calance, Inc. is seeking a Staff Offensive Security Engineer to drive continuous offensive security validation across our consumer digital platforms, mobile apps, cloud infrastructure, and fintech environments.

You will lead complex red team simulations, conduct in-depth vulnerability research, and champion secure, self-healing deployment practices across R&D. The role emphasizes mentorship of engineers, automation of security testing, and collaboration with DevOps to embed guardrails and

Competenze

• 8+ years of offensive security, red teaming, or penetration testing.
• Deep understanding of AWS security architecture including IAM bypass techniques, container escapes (Kubernetes), and serverless security.
• Experience with manual code review (Node.js, Python, or Go) and bypass techniques for web and mobile security controls.
• Ability to script in Python, Bash, or Go to automate exploitation chains or integrate security testing into CI/CD pipelines.
• Ability to translate complex technical risks into business impact for executives while collaborating with engineers.
• Optional but valued certifications: OSCP/OSCE, GXPN, or equivalent.
• An ethical hacker mindset with curiosity and persistence.
• Strong collaboration to help teams build secure systems.

Mansioni

• Lead Technical Strategy: Define the long-term vision for offensive security.
• Red Teaming & Adversary Simulation: Design and execute multi-stage simulations across cloud, mobile, and internal environments.
• Vulnerability Research: Conduct deep-dive research to identify high-risk vulnerabilities that automated tools may miss.
• Pave the Golden Path: Build automated security guardrails and self-healing infrastructure.
• Incident Response Support: Perform purple team exercises to validate alert coverage.
• Mentorship: Guide senior and mid-level engineers to foster secure development practices.

Conoscenze

Offensive security

Red teaming

AWS security

Application security

Automation scripting

Strategic communication

Mentorship

Owner mindset

Strumenti

Node.js

Python

Go

Kubernetes

AWS

Descrizione del lavoro

Staff Offensive Security Engineer

Job Title Staff Offensive Security Engineer - Remote - ID: 45129 Duration 6 Months to Hire Start Date ASAP Location remote, USA (Remote)

Looking for a Staff Offensive Security Engineer for our Security team. This individual will be responsible for the continuous offensive security validation across our consumer digital platforms, mobile applications, cloud infrastructure, internal corporate environments, and emerging hardware device lines. The Staff Offensive Security Engineer will drive the long-term technical strategy for offensive security, lead complex red teaming and multi-stage adversary simulations, manage deep-dive vulnerability research into high-risk areas, champion a culture of security-minded development across the R&D organization, and establish automated security guardrails and self-healing infrastructure within a fintech environment.

Your day-to-day:

• Lead Technical Strategy: Define the long-term vision for offensive security at Greenlight, moving beyond point-in-time testing to continuous security validation.
• Red Teaming & Adversary Simulation: Design and execute complex, multi-stage adversary simulations targeting our cloud infrastructure (AWS), mobile applications (iOS/Android), and internal corporate environments.
• Vulnerability Research: Conduct deep-dive research into high-risk areas of our ecosystem, identifying zero-day vulnerabilities or sophisticated logic flaws that automated tools miss.
• Pave the "Golden Path": Partner with DevOps and Engineering to build automated security guardrails and "self-healing" infrastructure that prevents common attack vectors from being introduced.
• Incident Response Support: Work closely with the Detection and Response team to improve our monitoring capabilities by performing "purple team" exercises to validate alert coverage.
• Mentorship: Act as a force multiplier by mentoring senior and mid-level engineers, fostering a culture of security-minded development across the entire R&D organization.

What you'll bring to the team:

• Expert-level Offensive Skills: 8+ years of experience in offensive security, red teaming, or penetration testing, with a proven track record of uncovering critical vulnerabilities in complex environments.
• Cloud Native Expertise: Deep understanding of AWS security architecture, including IAM bypass techniques, container escapes (Kubernetes), and serverless security.
• Application Security Depth: Experience with manual code review (Node.js, Python, or Go) and bypass techniques for modern web and mobile security controls.
• Automation Mindset: Ability to script in Python, Bash, or Go to automate exploitation chains or integrate security testing into CI/CD pipelines.
• Strategic Communication: The ability to translate complex technical risks into business impact for executive stakeholders while remaining a trusted peer to software engineers.
• Relevant Certifications (Optional but valued): OSCP/OSCE, GXPN, or equivalent demonstration of deep technical skill.
• An Ethical Hacker at Heart: You are curious, persistent, and think outside the box to find ways around traditional security controls.
• A Collaborative Partner: You believe that "breaking things" is only half the job; the real value is in helping the team build them back stronger.
• Owner Mindset: You take pride in your work and feel a deep sense of responsibility for the safety of our families and their finances.

Pay Range - 175-200K