Senior Offensive Security Engineer

Title: Penetration Testing Engineer

Location: 100% Remote Anywhere in US

Type: Contract

Duration: 6 months

Rate: 95-105/hr W2 or C2C (US Citizen and Green Card only)

Start: ASAP

Job Description: We are seeking a highly skilled Senior Offensive Security Engineer to lead offensive security testing across enterprise applications, infrastructure, cloud environments, and networks. This individual will execute advanced penetration testing engagements, mature offensive security capabilities, and partner closely with engineering and security teams to proactively identify and remediate security risks. The ideal candidate brings deep technical expertise, an adversarial mindset, and a passion for mentoring others while continuously advancing offensive security practices.

Must-Have Qualifications

• 5–7+ years of hands-on offensive security or penetration testing experience across web applications, APIs, enterprise networks, cloud environments, and infrastructure.
• Proven experience designing, leading, or maturing an enterprise offensive security or penetration testing program.

Searching for Development & Programming roles that provide visa sponsorship? Connect with international employers through Development & Programming Jobs with Visa Sponsorship opportunities actively seeking talented professionals.

• Expertise performing and managing internal and third-party penetration testing engagements, including scoping, authorization, rules of engagement, and reporting.
• Advanced proficiency with offensive security tools including Burp Suite, Kali Linux, and manual exploitation techniques.
• Strong experience with Active Directory exploitation, including Kerberoasting, delegation abuse, privilege escalation, and lateral movement.
• Experience securing and assessing cloud environments, including IAM security, container security, and CI/CD pipeline risks.
• Experience leveraging AI tools to improve offensive security testing workflows.

Deep knowledge of:

• OWASP Top 10
• MITRE ATT&CK Framework
• CVSS and vulnerability scoring

Explore our comprehensive directory of visa sponsorship jobs from employers worldwide who are ready to sponsor talented international professionals.

• End-to-end attack chain methodologies
• Strong scripting and automation skills using Python, Bash, or PowerShell.
• Hands-on experience performing threat modeling using STRIDE, PASTA, or similar methodologies.
• Experience securely handling sensitive testing data and engagement findings.
• Excellent written and verbal communication skills with the ability to clearly communicate technical risks to both technical and executive audiences.
• Demonstrated ability to work independently while collaborating effectively across cross-functional teams.

Preferred Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Software Engineering, or equivalent practical experience.
• Offensive security certifications such as OSCP, OSWE, OSEP, or similar.

Interested in opportunities specifically in United State? Discover our dedicated Visa Sponsorship Jobs in United State page featuring roles from top employers in this location.

• Cloud security certifications (AWS, Azure, or Google Cloud).
• Experience with Command & Control (C2) frameworks and adversary emulation.
• Familiarity with SIEM, EDR, and detection engineering concepts.
• Programming experience beyond scripting (C/C++, Go, JavaScript, Python) for exploit development or offensive tooling.
• Experience with SAST, DAST, Software Composition Analysis (SCA), and vulnerability management platforms.
• Experience developing offensive security testing playbooks and standardized methodologies.
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, PCI DSS, or similar.
• Proven experience mentoring and developing junior offensive security professionals.

Ideal Candidate

The ideal candidate combines elite technical penetration testing skills with the ability to influence security strategy across the enterprise. They thrive in highly collaborative environments, possess a strong adversarial mindset, and are passionate about building mature offensive security capabilities while helping engineering teams proactively reduce organizational risk.