6 дней назад
Senior Offensive Security Engineer
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Offensive Security Engineer (Penetration Testing/Red Teaming): Planning and executing objective-based penetration tests and red team engagements across products, cloud services, infrastructure, and AI pipelines with an accent on vulnerability chaining, exploit validation, and offensive tooling. Focus on designing realistic attack paths, building reproducible proofs of concept, validating detection telemetry with SOC teams, and surfacing recurring risks to security leadership.
Location: Tel Aviv, Israel
Company
A product company developing a leading game engine, cloud services, monetization products, and AI-assisted creation tools used across gaming and industries including automotive, manufacturing, and healthcare.
What you will do
- Plan and execute objective-based penetration tests and red team engagements across products, cloud services, and infrastructure.
- Identify and validate exploitable vulnerabilities, chain them into realistic attack paths, and demonstrate impact with reproducible proofs of concept.
- Develop automation and offensive tooling to extend security testing across the ecosystem.
- Run joint exercises with SOC and detection engineering teams to validate telemetry and improve detections.
- Deliver clear findings to engineering teams and identify recurring risk patterns for security leadership.
Requirements
- 5+ years of hands-on experience in offensive security, penetration testing, or red teaming.
- Proven ability to find, exploit, and chain vulnerabilities across applications.
- Deep understanding of modern web application and API security weaknesses.
- Hands-on experience assessing AWS or GCP cloud environments.
- Strong ability to develop and validate offensive security tooling.
- Professional written and verbal English is required for regular communication with colleagues and partners worldwide.
Nice to have
- Adversary emulation experience based on real threat actor TTPs.
- Security research experience in real-time 3D, game engines, SDKs, or mobile runtimes.
- Experience attacking CI/CD and build systems.
Culture & Benefits
- Health, life, and disability insurance, with offerings varying by country and employment status.
- Commute subsidy, retirement or pension plans, and employee stock ownership.
- Generous vacation and personal days, parental leave, and family-care programs.
- Mental health and wellbeing support, employee resource groups, and a global employee assistance program.
- Training and development programs, volunteering support, and donation matching.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →