Staff Engineer, Offensive Security

📋 Description

• Full-stack penetration testing of web apps, APIs, and mobile apps.
• Internal/External network and cloud-level audits with tooling.
• Vulnerability validation: triage and validate reports; reduce false positives.
• Adversary emulation: lead multi-week Red Team ops to test detections.
• Custom exploit development: build payloads to bypass EDR/AV.
• AI Red Teaming: build frameworks to test AI models for data leakage.

🎯 Requirements

• Experience: 7–10 years in offensive security, pentesting, or bug bounty.
• Concepts: MITRE ATT&CK, OWASP Top 10, LLMs, post-exploitation.
• Tooling: Burp Suite Pro, Nmap, Metasploit, Wireshark; C2 tools like Cobalt Strike, Sliver.
• Scripting and Coding: Python or Bash; Python, C++, automation for exploits.
• Certifications: OSCP, OSEP, OSWE, GXPN or similar OffSec certs desirable.
• Desired: Telecom expertise preferred.

🎁 Benefits

• Healthcare coverage and wellness leave.
• Generous time off and parental leave.
• Retirement savings program.
• Remote-friendly with flexible work.