Senior Offensive & Defensive Security Engineer

About the role

We are seeking an elite security expert who thinks like an attacker and builds defenses like an engineer. You will protect our systems against large‑scale, coordinated attacks and ensure critical vulnerabilities are discovered and remediated before they can be exploited.

Key responsibilities

• Conduct deep penetration tests, code reviews, and red‑team exercises across web apps, APIs, mobile apps, cloud infrastructure and internal networks.
• Design and implement defense‑in‑depth controls such as WAF, rate limiting, bot mitigation, DDoS protection, zero‑trust access and network segmentation.
• Harden cloud environments (AWS, Azure, GCP), containers, CI/CD pipelines, secrets management and IAM.
• Set up monitoring, SIEM, alerting and incident‑response playbooks to detect attacks within minutes.
• Collaborate with developers to embed security into the development lifecycle via threat modeling, SAST/DAST, dependency scanning and secure code review.
• Lead incident response, investigate breaches and ensure they do not recur.

Required profile

• 7+ years of hands‑on offensive and/or defensive security experience.
• Proven record of finding critical vulnerabilities (CVEs, bug‑bounty Hall of Fame, published research).
• Deep knowledge of OWASP Top 10, API security, authentication/authorization flaws, injection, SSRF, deserialization and business‑logic bugs.
• Strong cloud security expertise (AWS, Azure or GCP) and container/Kubernetes hardening.
• Experience defending against DDoS, credential stuffing, bot attacks and large‑scale exploitation.
• Clear communication skills for both technical and executive audiences.

Required skills

• Python, Go, Bash scripting.
• Burp Suite, Metasploit, Nmap, Ghidra/IDA, Cobalt Strike.
• AWS, Azure, GCP.
• Kubernetes, container hardening.
• CI/CD pipeline security, SAST, DAST.
• SIEM, monitoring and alerting tools.

What we offer

• Competitive salary plus performance bonus.
• A leadership team that takes security seriously.