Offensive Security Engineer, Purple Team Job at Meta (Bellevue)

Lead Information Security Engineer - Purple Team

Wells Fargo is seeking a Lead Information Security Engineer.

Location

India , Bengaluru

Salary:

Not provided

Wells Fargo

Expiration Date

June 25, 2026

Requirements

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Job Responsibility

Lead computer security incident response activities for highly complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and influence all levels of professionals including managers
Lead a team to achieve objectives
Lead or participate in offensive security testing in a purple team capacity, with the goal to aid security content development and/or verification by other teams

Fulltime

Staff Engineer, Offensive Security

The Staff Engineer acts as a Technical Lead. You don't just find bugs; you desig...

Location

Ireland

Salary:

Not provided

Stytch

Expiration Date

Until further notice

Requirements

7-10 years in offensive security, penetration testing, a high-volume bug bounty background, AppSec, or vulnerability exploitation
track record of finding high/critical vulnerabilities in complex environments using pentesting commercial or custom tools
Expert Knowledge and solid understanding of the MITRE ATT&CK matrix and the OWASP Top 10 for web applications and top 10 for LLMs
post exploitation (lateral movement, persistence, data exfiltration) and Adversarial ML
Proficient in OffSec popular tools like Burp Suite professional, Nmap, Metasploit, Wireshark etc... and AI security tools such as LangChain, TensorFlow for adversarial testing or, as well as use of C2 frameworks (Cobalt Strike, Sliver, Havoc) or similar tools
Ability to write functional scripts in Python or Bash to automate repetitive testing tasks
proficiency in coding and scripting like Python, C++, and scripting for creating custom offensive exploits that avoids signature-based detection
Possession of advanced industry certifications such as OSCP, OSEP, OSWE, GXPN or similar training in OffSec tracks is highly desirable

Job Responsibility

Full-Stack Penetration Testing: Perform manual and automated testing of web applications, APIs, and mobile apps (iOS/Android)
Internal/External Network Audits: Conduct network and cloud level assessments with various tooling
Vulnerability Validation: Triage and validate reports from automated scanners or bug bounty hunters to eliminate false positives and escalate true positives
AI/LLM Probing: Perform initial prompt injection and jailbreak tests on AI prototypes, services, and applications using established checklists (OWASP Top 10 for LLMs)
Technical Reporting: Draft high-quality reports that detail the 'path to compromise' with clear, reproducible steps for developers
Tool Maintenance: Manage and update the team's testing infrastructure (e.g., Burp Suite, and basic C2 listeners)
Remediation Support: Provide direct technical guidance to engineering teams on how to patch vulnerabilities like XSS, SQLi, and IDOR
Adversary Emulation: Design and lead multi-week Red Team operations that mimic specific threat actors (APTs) to test the SIRT detection capabilities
Custom Exploit Development: Build custom payloads, droppers, and obfuscated scripts to bypass EDR/AV and maintain stealth
AI Red Teaming Architecture: Build automated testing frameworks for AI systems (e.g., using PyRIT, Promptfoo, or Garak) to test for models related to sensitive data leakage

What we offer

competitive pay
generous time off
ample parental and wellness leave
healthcare
a retirement savings program

Staff Offensive Security Engineer

At GEICO, we offer a rewarding career where your ambitions are met with endless ...

Location

United States , Chevy Chase; Palo Alto; Seattle

Salary:

115000.00 - 230000.00 USD / Year

Geico

Expiration Date

Until further notice

Requirements

Mastery of vulnerability discovery and exploitation across applications, networks, and cloud using tools (e.g., Burp Suite, Metasploit), and custom scripts (Python, PowerShell)
Advanced understanding of OWASP, MITRE ATT&CK framework, software development lifecycle (SDLC), threat modeling, red/purple teaming, and attack path development
Hands-on experience with tools like Cobalt Strike, Mythic, BloodHound, and AutoSploit
Relevant professional security certifications (e.g. from GIAC or others)
Proven experience in achieving results efficiently through automation and establishing best practices
Proven track record to deliver business outcomes for meeting regulatory and compliance obligations
Ability to force multiply through coaching and mentorship to offensive security engineers across all functions (penetration testing, red teaming, purple teaming)
8+ years in engineering focused role, preferably in the tech industry
5+ years of experience in offensive security (penetrating testing, red team, and purple team)
5+ years of hands-on experience performing penetration-testing, red teaming, and purple teaming activities

Job Responsibility

Lead highly effective large-scale penetration testing initiatives
Participate in simulating real-world cyber-attacks (red teaming), and collaborating with defensive security teams (purple teaming)
Conduct tactical security penetration test assessments to validate the security of company applications (web, mobile, APIs, and AI products) against OWASP Top 10 threats and work with the Application Security team to provide feedback and recommendations to increase automated capabilities
Ensure penetration testing activities are meeting security, business, and compliance objectives and outcomes
Design and execute advanced threat emulation scenarios, including physical, social, and digital attack vectors
Collaborate with Blue Teams, Threat Intelligence, and Risk Management to ensure comprehensive attack coverage and feedback loops
Ensure operations align with industry regulations and compliance standards such as NIST, PCI DSS, and NYDFS
Champion continuous improvement and innovation in penetration testing, adversary simulation techniques, tools, and methodologies

What we offer

Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family’s overall well-being
Financial benefits including market-competitive compensation
a 401K savings plan vested from day one that offers a 6% match
performance and recognition-based incentives
and tuition assistance
Access to additional benefits like mental healthcare as well as fertility and adoption assistance
Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year

Fulltime