Offensive Security Engineer, Purple Team Job at Meta (Bellevue)

Engineering Manager, Offensive Security & Vulnerability Management

Join us in building the future of finance. Our mission is to democratize finance...

Location

Canada , Toronto

Salary:

161500.00 - 190000.00 CAD / Year

Robinhood

Expiration Date

Until further notice

Requirements

5+ years of experience in security
3+ years managing technical teams in Offensive Security, Red Teaming, or Vulnerability Management
Strong technical foundations in adversary simulation, threat modeling, and vulnerability lifecycle management
Strategic thinking, translating offensive findings and vuln data into business risk language and operational improvements
Experience building and scaling automated security validation (e.g. Purple teaming, attack simulation, continuous testing frameworks)
Operating in complex challenging environments and networks
Influence across functions and driving remediation outcomes without direct authority

Job Responsibility

Lead the Offensive Security team in planning and executing red team operations, internal penetration tests, and adversary emulation campaigns
Oversee the Vulnerability Management team responsible for running our bug bounty program as well as continuous discovery, triage, and remediation of vulnerabilities across infrastructure, applications, and cloud environments
Define and drive the strategy for Autonomic Security Operations, investing in automated testing and validation pipelines that codify security knowledge and detection coverage
Partner closely with engineering, product, threat intelligence and detection & response stakeholders to ensure controls are continuously tested and vulnerabilities are effectively surfaced
Build processes, tooling, and dashboards to track and communicate vulnerability and control assurance metrics to stakeholder and leadership
Contribute to long-term security planning by identifying control gaps, operational bottlenecks, and opportunities to scale security through automation

What we offer

bonus opportunities
equity
benefits

Fulltime

Engineering Manager, Offensive Security & Vulnerability Management

Robinhood’s Security Operations team is seeking a strategic and technical Senior...

Location

United States , Menlo Park

Salary:

217000.00 - 255000.00 USD / Year

Robinhood

Expiration Date

Until further notice

Requirements

5+ years of experience in security
3+ years managing technical teams in Offensive Security, Red Teaming, or Vulnerability Management
Strong technical foundations in adversary simulation, threat modeling, and vulnerability lifecycle management
Strategic thinking, translating offensive findings and vuln data into business risk language and operational improvements
Experience building and scaling automated security validation (e.g. Purple teaming, attack simulation, continuous testing frameworks)
Operating in complex challenging environments and networks
Influence across functions and driving remediation outcomes without direct authority

Job Responsibility

Lead the Offensive Security team in planning and executing red team operations, internal penetration tests, and adversary emulation campaigns
Oversee the Vulnerability Management team responsible for running our bug bounty program as well as continuous discovery, triage, and remediation of vulnerabilities across infrastructure, applications, and cloud environments
Define and drive the strategy for Autonomic Security Operations, investing in automated testing and validation pipelines that codify security knowledge and detection coverage
Partner closely with engineering, product, threat intelligence and detection & response stakeholders to ensure controls are continuously tested and vulnerabilities are effectively surfaced
Build processes, tooling, and dashboards to track and communicate vulnerability and control assurance metrics to stakeholder and leadership
Contribute to long-term security planning by identifying control gaps, operational bottlenecks, and opportunities to scale security through automation

What we offer

Performance driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching
100% paid health insurance for employees with 90% coverage for dependents
Lifestyle wallet - a highly flexible benefits spending account for wellness, learning, and more
Employer-paid life & disability insurance, fertility benefits, and mental health benefits
Time off to recharge including company holidays, paid time off, sick time, parental leave, and more
Exceptional office experience with catered meals, events, and comfortable workspaces

Fulltime

Senior Penetration Tester

As a Penetration Tester, you'll conduct regular, comprehensive security assessme...

Location

Belgium , Brussels

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Minimum of 5 years' experience in one or more of the following areas: Penetration Tester, Red/Purple Team Member, Security Engineer
Knowledge of technologies up to system level (web frameworks, communications protocols, database systems)
Offensive security knowledge of cyber-attack techniques, vulnerabilities, and mitigation strategies
Knowledge of penetration testing tools, frameworks, and methodology
Skills using Kali Linux, Nmap, PowerShell, Metasploit, Cobalt Strike, OWASP ZAP, Burp Suite
Proficiency in scripting
Awareness of frameworks such as MITRE ATT&CK and NIST and how they can be applied effectively within an enterprise
Familiarity with the latest exploits, tactics, techniques, and procedures (TTP), vulnerability remediation and security trends
Cyber security qualifications from Offensive Security, SANS, Pentester Academy, CREST, eLearnSecurity or others

Job Responsibility

Scoping and executing of complex penetrations test across a wide scope of technologies, products, services, and applications and critical infrastructure companies
Helping the team to define and improve the internal security testing programme
Documenting technical issues both Cyber and IT related during testing assessments
Improve our monitoring services by working in purple style exercises and operating in a red team capacity to improve the ability to detect and respond to threats
Supporting incident response by providing context and expertise around cyber threats
Mentor to our junior & medior colleagues

What we offer

Extensive career development opportunities, both local and international
Part of a dynamic network of 56,000 professionals at all stages of their careers
Wide array of offices to explore

Fulltime

Information Security Consultant

We are seeking a highly skilled Information Security Consultant to lead the scop...

Location

United Kingdom , London

Salary:

Not provided

European Bank for Reconstruction and Development

Expiration Date

January 28, 2026

Requirements

Strong understanding of adversarial tactics (MITRE ATT&CK framework) and threat emulation
Experience with penetration testing, exploit development, and detection engineering
Familiarity with SIEM, EDR, and threat-hunting tools
Commitment to staying up to date with emerging threats and remedies
Ability to translate technical concepts, including technical risk, into business language and business impact
Experience in proposing actionable remedial steps to address findings
Experience of reporting meaningful metrics to a variety of internal technical and non-technical audiences
Proven ability to work with external MSSPs and consultants
Experience in overseeing and managing testing campaigns with a variety of internal stakeholders
Excellent communication skills for cross-functional engagement

Job Responsibility

Define objectives, scope, and success criteria for Red Team and Purple Team exercises
Develop detailed test plans aligned with organizational risk priorities and compliance requirements
Coordinate scheduling and resource allocation for internal and external stakeholders
Act as the primary liaison between internal teams and external MSSPs/consultants
Ensure testing activities adhere to agreed timelines, methodologies, and ethical guidelines
Monitor progress and provide status updates to senior leadership
Review and validate attack scenarios, tactics, techniques, and procedures (TTPs) used during engagements
Ensure Purple Team exercises effectively integrate offensive and defensive teams for collaborative improvement to enhance detection and response
Analyse findings from Red and Purple Team engagements
Prepare comprehensive reports detailing vulnerabilities, attack paths, and defensive gaps

What we offer

Varied, stimulating and engaging work that gives you an opportunity to interact with a wide range of experts in the financial, political, public and private sectors across the regions we invest in
A working culture that embraces inclusion and celebrates diversity
An environment that places sustainability, equality and digital transformation at the heart of what we do
Flexible working

Fulltime

!

Mid - Senior Cybersecurity Engineer

Join the leading AU fintech company as a Senior Cybersecurity Engineer who will ...

Location

Philippines , Manila

Salary:

Not provided

MONEYME

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Information Security, Information Technology, or a related discipline
Professional certifications such as CEH, OSCP or equivalent are highly regarded
Equivalent practical experience may be considered in lieu of formal qualifications
3+ years of experience in cybersecurity engineering experience with strong focus on application security
Demonstrated ownership of vulnerability remediation from discovery through validation
Practical experience implementing and tuning SAST and DAST programs
Strong familiarity with OWASP Top 10 and OWASP API Security Top 10
Experience working directly with software engineers and platform teams
Experience embedding security into the software development lifecycle
Experience operating in regulated or high-risk environments

Job Responsibility

Own application security across web, mobile, and API systems
Identify and prioritize vulnerabilities using SAST, DAST, and threat modelling
Assess findings against OWASP Top 10 and OWASP API Security risks
Drive remediation with engineering teams and validate fixes
Embed security into the software development lifecycle
Conduct threat modelling during design and architecture
Perform security reviews for new features and changes
Integrate SAST, DAST, dependency, and container testing into CI CD pipelines
Define risk based security gates and tune rulesets
Assess high risk flows involving authentication, sensitive data, APIs, and third party integrations

What we offer

HMO on Day 1 + 1 free dependent
15 days of vacation leaves and 15 days of sick leave
1 birthday leave
Health and wellbeing initiatives like weekly sports activities and MONEYME Olympics
Fun filled company activities - summer outings, team building, team lunch or dinner, Halloween event, year-end party and so much more!
Complimentary snacks in the office
MONEYME Merchandise - hoodie, T-shirt, tumbler, notebook, and id lace
Quarterly champion awards & reward trips

Cloud Security Senior Analyst

The Cloud Security Operations team works in a multi-disciplinary team of teams d...

Location

Hungary , Budapest

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

5+ years of experience in a similar, offensive security related role
Offensive Security-oriented mindset (threat-modeling, vulnerability assessments, penetration testing, etc.)
Hands-on experience with cloud platforms (GCP, AWS)
Excellent understanding of cloud security concepts/best practices in various cloud Service Providers (for example: Azure/M365)
Familiarity with the current threat landscape which GCP exists in
Familiarity with securing containers and container orchestration frameworks (such as Kubernetes)
Programming/scripting languages a plus (Python and PowerShell preferred, but not required)
Ability to deliver presentations to technical and non-technical individuals
Fluency in English
Bachelor's Degree or equivalent working experience

Job Responsibility

Full end to end security assurance activities in GCP including Vulnerability Assessments (preproduction, post-production), Purple Team exercises (Red and Blue team collaboration) to identify areas of risk and ensure any gaps are documented and remediated
Provide threat modeling and risk assessment services to characterize the risk and severity posture of various systems and components in the cloud environment
Partner with Engineering and Operations teams to create, implement, and apply DevSecOps practices and processes that are consumed by developers across all sectors in Citi

What we offer

Cafeteria Program
Home Office Allowance (for colleagues working in hybrid work models)
Paid Parental Leave Program (maternity and paternity leave)
Private Medical Care Program and onsite medical rooms at our offices
Pension Plan Contribution to voluntary pension fund
Group Life Insurance
Employee Assistance Program
Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
Flexible work arrangements to support you in managing work - life balance
Career progression opportunities across geographies and business lines

Fulltime

New

Security Engineer, Investigator - i3E Account Threats & Scams

The Integrity, Investigations, and Intelligence (i3E) Account Threats team is de...

Location

United States , Bellevue

Salary:

154000.00 - 217000.00 USD / Year

New

Compliance Engineer - Infra NPI Hardware

As part of Meta’s Infrastructure organization, compliance engineer will work on ...

Location

United States , Fremont

Salary:

118000.00 - 170000.00 USD / Year

Offensive Security Engineer, Purple Team

Meta

Location:
United States , Bellevue

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
January 23, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Offensive Security Engineer, Purple Team

Engineering Manager, Offensive Security & Vulnerability Management