Offensive Security Engineer Job at Meta (Bellevue)

Security Engineering Manager

Corporate Tools is looking for a Security Engineering Manager who eats vulnerabi...

Location

Salary:

185000.00 USD / Year

Corporate Tools

Expiration Date

Until further notice

Requirements

BS in Computer Science or equivalent experience
5+ years building and securing software — hands‑on experience with web frameworks (Rails, Django, Node, etc.) and modern architectures
Proven application security expertise: secure SDLC, OWASP, threat modeling, exploit mitigation, and vulnerability remediation
Experience leading security or engineering teams — setting strategy, running scrums, conducting reviews, and mentoring talent
Strong knowledge of cloud environments (AWS, Azure, GCP) and securing databases (SQL/NoSQL) in production
Exposure to offensive and defensive security practices — red team, blue team, or incident response experience a plus
Ability to communicate risk and solutions to execs, engineers, and auditors — respected by hackers and trusted by leadership
Pragmatic mindset: knows when to enable speed, when to block, and how to automate guardrails to keep teams fast and safe

Job Responsibility

Lead 6 security engineers across three specialized teams: Red (offense), Blue (defense), and Orange (compliance)
Own the security strategy and execution for offensive testing, defensive monitoring, and compliance work — ensuring all three disciplines are aligned
Act as the technical anchor for the teams: review code, guide exploits, drive secure architecture decisions, and mentor engineers
Partner with product and engineering leads to embed security into development (threat modeling, secure coding, CI/CD guardrails)
Build internal security tools and automation that make it easier for product teams to ship securely
Oversee red team engagements and turn findings into actionable fixes, not just reports
Manage defensive capabilities — incident response, detection engineering, monitoring — and continually improve them
Ensure compliance frameworks (SOC2, ISO, PCI, etc.) are met without slowing innovation or creating unnecessary bureaucracy
Set a high technical bar: coach, mentor, and challenge engineers to pursue elegant, practical security solutions
Balance being a builder and a leader: stay hands‑on enough to earn respect from hackers, but prioritize leading and scaling the team’s impact

What we offer

100% employer-paid medical, dental and vision for employees
Annual review with raise option
22 days Paid Time Off accrued annually, and 4 holidays
After 3 years, PTO increases to 29 days. Employees transition to flexible time off after 5 years with the company—not accrued, not capped, take time off when you want
The 4 holidays are: New Year’s Day, Fourth of July, Thanksgiving, and Christmas Day
Paid Parental Leave
Up to 6% company matching 401(k) with no vesting period
Quarterly allowance
Use to make your remote work set up more comfortable, for continuing education classes, a plant for your desk, coffee for your coworker, a massage for yourself... really, whatever
Open concept office with friendly coworkers

Principal Security Engineer

We’re looking for a principal Security Testing Engineer to work closely with the...

Location

India , Bengaluru

Salary:

Not provided

Atlassian

Expiration Date

Until further notice

Requirements

6+ years penetration testing experience in a consultancy, dedicated internal pentesting team, or similar offensive security function
2+ years experience as an offensive security team lead
Strong experience in white-box application security testing
Full stack application security technical experience
Delivery focused
Experience mentoring junior penetration testers
The ability to complete a penetration test and code review of a modern cloud application
Experience leading security teams on complex penetration testing engagements
Strong, practical understanding of security testing methodologies, supporting infrastructure requirements and legal considerations
Strong collaboration and communication skills when working with closely with deeply technical development and infrastructure teams

Job Responsibility

Providing SME knowledge and guidance to a team of pen testers/code review
Continuing to mature pen testing/code review workflows
Identifying and recruiting top-class penetration testing talent
Supporting and guiding the growth of a India based penetration testing team
Analysing vulnerability data for trends and gaps in controls
Identifying significant vulnerabilities in Atlassian products prior to production deployment
Building contacts in the Atlassian engineering team, product team and security team
Building and leveraging existing contacts to identify potential talent to join the team
Establishing testing processes in the local team that complements and extends existing processes
Identifying insights which contribute to strategic investments

What we offer

health and wellbeing resources
paid volunteer days

Fulltime

Product Security Test Engineer

As part of our HPE Operations Cybersecurity Lab, the Security Systems/Software E...

Location

Puerto Rico , Aguadilla

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's or Master's degree in Computer Science, Information Systems, or equivalent
Typically 4-6 years experience
Expertise in multiple software systems design tools and languages
Experience of relational database management systems and their query languages (e.g. SQL)
Strong Experience writing software using any modern language and technology stack, i.e Python, Javascript, and frameworks for building APIs and user interfaces
Knowledge of tools like Metasploit, Nmap, Burp Suite, Wireshark, vulnerability scanning tools, network mapping, and packet analysis
Experience in overall architecture of software systems for products, solutions and IT systems
Expertize working in a DevSecOps environment
Knowledge of OWASP Top 10 vulnerabilities, web-based attacks (SQL injection, XSS, CSRF), and web protocols
Experience with encryption methods and their applications

Job Responsibility

Designs security enhancements, updates, and programming changes for portions and subsystems of systems software, including operating systems, compliers, networking, utilities, databases, and Internet-related tools
Analyzes design and determines coding, programming, and integration activities required based on security requirements and general objectives and knowledge of overall architecture of product or solution
Design, develop, test, and maintain robust, scalable, and high-quality security and software solutions
Supports application and systems security strategy, architecture and roadmaps, review application architectures, code and system services from a security perspective
Writes and executes complete security testing plans, protocols, and documentation for assigned portion of application
identifies and debugs, and creates solutions for issues with code and integration into application architecture
Leads a project team of other software systems engineers and internal and outsourced development partners to develop reliable, cost effective and high quality solutions for assigned systems portion or subsystem
Collaborates and communicates with management, internal, and outsourced development partners regarding software systems design status, project progress, and issue resolution
Represents the software systems engineering team for all phases of larger and more-complex development projects
Provides guidance and mentoring to less-

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Senior Security Researcher

Endor Labs is building the Application Security platform for the software develo...

Location

United States

Salary:

Not provided

Endor Labs

Expiration Date

Until further notice

Requirements

5+ years of experience in security research, vulnerability discovery, and offensive security
deep expertise in reverse engineering, exploit development, and software vulnerability analysis
strong understanding of software supply chain security, including package management systems, CI/CD pipelines, and dependency analysis
experience discovering and responsibly disclosing zero-day vulnerabilities
proven track record of publishing high-quality research or presenting at top security conferences (e.g., Black Hat, DEF CON, RSAC, BSides)
proficiency in programming languages such as Python, Rust, or Go
strong analytical skills and the ability to conduct complex security research autonomously
excellent communication skills, both written and verbal, to convey technical concepts to diverse audiences.

Job Responsibility

Conduct offensive security research on software supply chain threats, identifying and analyzing zero-day vulnerabilities
develop and refine exploit techniques to understand modern attack vectors targeting software supply chain through malicious code, 3rd party libraries, and CI/CD systems
work closely with Product Management to translate research findings into innovative security capabilities within Endor Labs' products
publish research findings through technical blogs, white papers, and industry-leading security conferences
collaborate with security engineers and developers to prototype and implement detection and mitigation strategies for emerging threats
contribute to the security community by developing open-source tools, methodologies, or frameworks that enhance software supply chain security
stay ahead of the latest threats, attacker methodologies, and evolving security trends to continuously refine our research efforts.

What we offer

Work with a world-class team dedicated to pushing the boundaries of security research
directly influence the security of modern software supply chains
a culture that values innovation, collaboration, and continuous learning
competitive compensation, flexible work environment, and a generous benefits package
opportunity to present groundbreaking research and contribute to the global security community.

Fulltime

Hardware Security Researcher

Internship position in the Donjon team responsible for security of all products ...

Location

France , Paris

Salary:

1500.00 EUR / Month

Ledger

Expiration Date

Until further notice

Requirements

Experience with programming in Python or Rust
Basic understanding of (or strong curiosity towards) semiconductor devices and Integrated Circuits stack up and layout
Interest in working in a hands-on, experimental lab environment
Ability to formalize your work and shape concepts at the relevant abstraction level
Ability to develop and document methods, standards, and guidelines
Ability to clearly articulate and communicate your ideas, in written and spoken English

Job Responsibility

Research cutting-edge offensive security techniques
Develop reverse engineering techniques and tools for Integrated Circuits manufactured on modern process nodes
Develop attacks for the chips you studied based on reverse engineered information
Formalize and generalize the attacks you find, and propose systematic ways to mitigate them or altogether render them impossible
Submit your findings for publication in academic journals or specialised conferences if time permits

What we offer

Social: Frequent social events, snacks and drinks
Transportation allowance: commuter allowance to contribute to your preferred means of transportation
Lunch vouchers: meal allowance with Swile
Vacation: 1 day off for every full month of work, in addition to national holidays

Fulltime

Offensive Security Engineer I

As an Offensive Security Engineer, you help protect Mollie’s platform and the bu...

Location

Italy , Milan

Salary:

Not provided

Mollie

Expiration Date

Until further notice

Requirements

2+ years of hands-on offensive security experience (penetration testing, ethical hacking, product security engineering)
Certifications such as OSCP, OSCE, or similar are highly preferred
Practical experience testing modern web applications and APIs (auth, authorization, business logic, data handling)
Familiarity with common testing tools and techniques (e.g., Burp Suite and similar tooling)
Basic scripting/automation skills (Python, Bash, or similar) to speed up repeatable work
Understanding of cloud environments and common attack vectors (GCP concepts are all welcome)
Ability to write clear, actionable findings and communicate risk to both technical and non-technical stakeholders
A collaborative mindset: you enjoy partnering with teams to get issues fixed and verified

Job Responsibility

Plan and execute security assessments across web applications, APIs, cloud services, and internal systems—focused on realistic attack paths and business impact
Confirm exploitability, reduce false positives, and help teams understand severity and remediation options
Partner with SecOps and Security Engineering to run collaborative exercises (e.g., detection validation, incident simulations, phishing/crisis scenarios) that strengthen real-world readiness
Improve playbooks, testing approaches, and automation to scale offensive security across teams and technologies
Partner closely with engineering teams to answer questions, support fixes, retest, and uplift secure development practices—while also contributing to security awareness initiatives across the organization

What we offer

Noise cancelling headphones
MacBook
Birthday off
Complimentary baby days
20 days working from abroad
22 holiday days
Internet allowance
Lunch voucher
Wellbeing program
Health insurance

Fulltime

Offensive Security Engineer I

As an Offensive Security Engineer, you help protect Mollie’s platform and the bu...

Location

Portugal , Lisbon

Salary:

Not provided

Mollie

Expiration Date

Until further notice

Requirements

2+ years of hands-on offensive security experience (penetration testing, ethical hacking, product security engineering)
Certifications such as OSCP, OSCE, or similar are highly preferred
Practical experience testing modern web applications and APIs (auth, authorization, business logic, data handling)
Familiarity with common testing tools and techniques (e.g., Burp Suite and similar tooling)
Basic scripting/automation skills (Python, Bash, or similar) to speed up repeatable work
Understanding of cloud environments and common attack vectors (GCP concepts are all welcome)
Ability to write clear, actionable findings and communicate risk to both technical and non-technical stakeholders
A collaborative mindset: you enjoy partnering with teams to get issues fixed and verified

Job Responsibility

Plan and execute security assessments across web applications, APIs, cloud services, and internal systems—focused on realistic attack paths and business impact
Confirm exploitability, reduce false positives, and help teams understand severity and remediation options
Partner with SecOps and Security Engineering to run collaborative exercises (e.g., detection validation, incident simulations, phishing/crisis scenarios) that strengthen real-world readiness
Improve playbooks, testing approaches, and automation to scale offensive security across teams and technologies
Partner closely with engineering teams to answer questions, support fixes, retest, and uplift secure development practices—while also contributing to security awareness initiatives across the organization

What we offer

Noise cancelling headphones
MacBook
Birthday off
Complimentary baby days
20 days working from abroad
22 holiday days
Commute allowance
Work from home budget
Bike lease plan
Internet allowance

Fulltime

Senior Security Engineer - Offensive Security

We enable Plaid to quickly build safe and secure products while ensuring that Pl...

Location

United States , New York

Salary:

207600.00 - 310800.00 USD / Year

Plaid

Expiration Date

Until further notice

Requirements

5+ years of experience in offensive security roles
Experience leading individual offensive security/red team operations
Comfortable operating independently and defining your own direction
Comfortable communicating with a wide range of technical and non-technical stakeholders

Job Responsibility

Establish a charter and framework for Plaid’s offensive security program
Conduct red team operations against corp and prod infrastructure to identify previously unknown problems and assess the state of Plaid’s security
Communicate findings to stakeholders and follow up to ensure appropriate resolution
Serve as the primary owner for red teaming at Plaid

Fulltime

Offensive Security Engineer

Meta

Location:
United States , Bellevue

Category:
IT - Software Development

Contract Type:
Employment contract

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
April 24, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Offensive Security Engineer

Security Engineering Manager

Principal Security Engineer

Product Security Test Engineer

Senior Security Researcher

Hardware Security Researcher

Offensive Security Engineer I

Offensive Security Engineer I

Senior Security Engineer - Offensive Security

Offensive Security Engineer

Meta

Location:United States , Bellevue

Category:IT - Software Development

Contract Type:Employment contract

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:April 24, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Offensive Security Engineer

Security Engineering Manager

Principal Security Engineer

Product Security Test Engineer

Senior Security Researcher

Hardware Security Researcher

Offensive Security Engineer I

Offensive Security Engineer I

Senior Security Engineer - Offensive Security

Location:
United States , Bellevue

Category:
IT - Software Development

Contract Type:
Employment contract

Job Posted:
April 24, 2026