Offensive Security Engineer Job at Robinhood (Menlo Park, CA)

Engineering Manager, Offensive Security & Vulnerability Management

Join us in building the future of finance. Our mission is to democratize finance...

Location

Canada , Toronto

Salary:

161500.00 - 190000.00 CAD / Year

Robinhood

Expiration Date

Until further notice

Requirements

5+ years of experience in security
3+ years managing technical teams in Offensive Security, Red Teaming, or Vulnerability Management
Strong technical foundations in adversary simulation, threat modeling, and vulnerability lifecycle management
Strategic thinking, translating offensive findings and vuln data into business risk language and operational improvements
Experience building and scaling automated security validation (e.g. Purple teaming, attack simulation, continuous testing frameworks)
Operating in complex challenging environments and networks
Influence across functions and driving remediation outcomes without direct authority

Job Responsibility

Lead the Offensive Security team in planning and executing red team operations, internal penetration tests, and adversary emulation campaigns
Oversee the Vulnerability Management team responsible for running our bug bounty program as well as continuous discovery, triage, and remediation of vulnerabilities across infrastructure, applications, and cloud environments
Define and drive the strategy for Autonomic Security Operations, investing in automated testing and validation pipelines that codify security knowledge and detection coverage
Partner closely with engineering, product, threat intelligence and detection & response stakeholders to ensure controls are continuously tested and vulnerabilities are effectively surfaced
Build processes, tooling, and dashboards to track and communicate vulnerability and control assurance metrics to stakeholder and leadership
Contribute to long-term security planning by identifying control gaps, operational bottlenecks, and opportunities to scale security through automation

What we offer

bonus opportunities
equity
benefits

Fulltime

Engineering Manager, Offensive Security & Vulnerability Management

Robinhood’s Security Operations team is seeking a strategic and technical Senior...

Location

United States , Menlo Park

Salary:

217000.00 - 255000.00 USD / Year

Robinhood

Expiration Date

Until further notice

Requirements

5+ years of experience in security
3+ years managing technical teams in Offensive Security, Red Teaming, or Vulnerability Management
Strong technical foundations in adversary simulation, threat modeling, and vulnerability lifecycle management
Strategic thinking, translating offensive findings and vuln data into business risk language and operational improvements
Experience building and scaling automated security validation (e.g. Purple teaming, attack simulation, continuous testing frameworks)
Operating in complex challenging environments and networks
Influence across functions and driving remediation outcomes without direct authority

Job Responsibility

Lead the Offensive Security team in planning and executing red team operations, internal penetration tests, and adversary emulation campaigns
Oversee the Vulnerability Management team responsible for running our bug bounty program as well as continuous discovery, triage, and remediation of vulnerabilities across infrastructure, applications, and cloud environments
Define and drive the strategy for Autonomic Security Operations, investing in automated testing and validation pipelines that codify security knowledge and detection coverage
Partner closely with engineering, product, threat intelligence and detection & response stakeholders to ensure controls are continuously tested and vulnerabilities are effectively surfaced
Build processes, tooling, and dashboards to track and communicate vulnerability and control assurance metrics to stakeholder and leadership
Contribute to long-term security planning by identifying control gaps, operational bottlenecks, and opportunities to scale security through automation

What we offer

Performance driven compensation with multipliers for outsized impact, bonus programs, equity ownership, and 401(k) matching
100% paid health insurance for employees with 90% coverage for dependents
Lifestyle wallet - a highly flexible benefits spending account for wellness, learning, and more
Employer-paid life & disability insurance, fertility benefits, and mental health benefits
Time off to recharge including company holidays, paid time off, sick time, parental leave, and more
Exceptional office experience with catered meals, events, and comfortable workspaces

Fulltime

Security Engineering Manager

Corporate Tools is looking for a Security Engineering Manager who eats vulnerabi...

Location

Salary:

185000.00 USD / Year

Corporate Tools

Expiration Date

Until further notice

Requirements

BS in Computer Science or equivalent experience
5+ years building and securing software — hands‑on experience with web frameworks (Rails, Django, Node, etc.) and modern architectures
Proven application security expertise: secure SDLC, OWASP, threat modeling, exploit mitigation, and vulnerability remediation
Experience leading security or engineering teams — setting strategy, running scrums, conducting reviews, and mentoring talent
Strong knowledge of cloud environments (AWS, Azure, GCP) and securing databases (SQL/NoSQL) in production
Exposure to offensive and defensive security practices — red team, blue team, or incident response experience a plus
Ability to communicate risk and solutions to execs, engineers, and auditors — respected by hackers and trusted by leadership
Pragmatic mindset: knows when to enable speed, when to block, and how to automate guardrails to keep teams fast and safe

Job Responsibility

Lead 6 security engineers across three specialized teams: Red (offense), Blue (defense), and Orange (compliance)
Own the security strategy and execution for offensive testing, defensive monitoring, and compliance work — ensuring all three disciplines are aligned
Act as the technical anchor for the teams: review code, guide exploits, drive secure architecture decisions, and mentor engineers
Partner with product and engineering leads to embed security into development (threat modeling, secure coding, CI/CD guardrails)
Build internal security tools and automation that make it easier for product teams to ship securely
Oversee red team engagements and turn findings into actionable fixes, not just reports
Manage defensive capabilities — incident response, detection engineering, monitoring — and continually improve them
Ensure compliance frameworks (SOC2, ISO, PCI, etc.) are met without slowing innovation or creating unnecessary bureaucracy
Set a high technical bar: coach, mentor, and challenge engineers to pursue elegant, practical security solutions
Balance being a builder and a leader: stay hands‑on enough to earn respect from hackers, but prioritize leading and scaling the team’s impact

What we offer

100% employer-paid medical, dental and vision for employees
Annual review with raise option
22 days Paid Time Off accrued annually, and 4 holidays
After 3 years, PTO increases to 29 days. Employees transition to flexible time off after 5 years with the company—not accrued, not capped, take time off when you want
The 4 holidays are: New Year’s Day, Fourth of July, Thanksgiving, and Christmas Day
Paid Parental Leave
Up to 6% company matching 401(k) with no vesting period
Quarterly allowance
Use to make your remote work set up more comfortable, for continuing education classes, a plant for your desk, coffee for your coworker, a massage for yourself... really, whatever
Open concept office with friendly coworkers

Principal Security Engineer

We’re looking for a principal Security Testing Engineer to work closely with the...

Location

India , Bengaluru

Salary:

Not provided

Atlassian

Expiration Date

Until further notice

Requirements

6+ years penetration testing experience in a consultancy, dedicated internal pentesting team, or similar offensive security function
2+ years experience as an offensive security team lead
Strong experience in white-box application security testing
Full stack application security technical experience
Delivery focused
Experience mentoring junior penetration testers
The ability to complete a penetration test and code review of a modern cloud application
Experience leading security teams on complex penetration testing engagements
Strong, practical understanding of security testing methodologies, supporting infrastructure requirements and legal considerations
Strong collaboration and communication skills when working with closely with deeply technical development and infrastructure teams

Job Responsibility

Providing SME knowledge and guidance to a team of pen testers/code review
Continuing to mature pen testing/code review workflows
Identifying and recruiting top-class penetration testing talent
Supporting and guiding the growth of a India based penetration testing team
Analysing vulnerability data for trends and gaps in controls
Identifying significant vulnerabilities in Atlassian products prior to production deployment
Building contacts in the Atlassian engineering team, product team and security team
Building and leveraging existing contacts to identify potential talent to join the team
Establishing testing processes in the local team that complements and extends existing processes
Identifying insights which contribute to strategic investments

What we offer

health and wellbeing resources
paid volunteer days

Fulltime

Cloud Security Engineer

The Cloud Security Analyst performs all processes and procedures necessary to en...

Location

Brazil , São Paulo

Salary:

Not provided

KnowBe4

Expiration Date

Until further notice

Requirements

Bachelor’s degree in information security, information systems, or similar preferred
Relevant industry certification in information security, cloud security or similar preferred
Certifications in AWS, Azure and specifically AWS Security highly desirable
Demonstrated practical knowledge in cloud computing, cloud security, information security, IT, internet concepts
Some experience with infosec testing tools and scripts
Some experience with offensive cloud security
Familiar with application development concepts: servers, databases, coding, API’s, containers, logging, troubleshooting
Some experience working with Terraform/CloudFormation
Familiar with OWASP top 10 and MITRE ATT&CK Framework
Understanding of MITRE ATT&CK matrix

Job Responsibility

Responds to security alerts created across infosec alerting systems
Perform continuous monitoring and triage of security alerts from SIEM, CSPM, CWPP, and other cloud security tools
Serve as the primary responder for cloud security incidents, leading the investigation, containment, eradication, and recovery efforts
Creates new security alerts and dashboards related to cloud security
Triage cloud security findings
Performs threat hunting across information security log feeds
Monitor for, investigate, and respond to security incidents
Performs root cause analysis on identified vulnerabilities and identified incidents
Perform security reviews and penetration testing across company cloud infrastructure
Stay informed on the latest vulnerabilities

What we offer

company-wide bonuses based on monthly sales targets
employee referral bonuses
adoption assistance
tuition reimbursement
certification reimbursement
certification completion bonuses
modern, high-tech, and fun work environment

Fulltime

Application Security Engineer II

In this role, you will support Rackspace's application security program by imple...

Location

India

Salary:

Not provided

Rackspace

Expiration Date

Until further notice

Requirements

2-4 years in the information security field
Experience working with application security, security testing, or DevSecOps practices
Working knowledge of the SDLC, security concepts, and vulnerability assessment methodologies
Hands-on experience with or understanding of programming and scripting languages including one or more of the following: Python, Java, Node.js, Go, Ruby, PHP
databases such as SQL
and related tools such as Github, Gitlab, Jenkins, and CircleCI
Understanding of common vulnerabilities, remediation approaches, and industry-standard classification schemes (CVE, CWE, CVSS, OWASP Top 10)
Familiarity with relevant compliance regulations, such as PCI-DSS, ISO 27001, SOC 2, or HIPAA
Passion for security and eagerness to learn about new technologies and emerging security vulnerabilities
Strong communication skills with the ability to work collaboratively across teams

Job Responsibility

Execute application security testing using both automated tools and manual testing techniques on web applications, APIs, containers, and other software components
Configure, maintain, and operate SAST, DAST, and other application security testing tools
Analyze and triage security findings, documenting clear remediation guidance for development teams
Support the vulnerability reporting process and track findings through to resolution
Assist with triage and validation of external vulnerability disclosures and bug bounty reports
Contribute to the development and documentation of application security processes and standards
Participate in security code reviews and threat modeling exercises
Help track and report metrics for application security program health
Collaborate with development and DevOps teams to integrate security into CI/CD pipelines
Stay current with application security trends, tools, and best practices

Fulltime

Product Security Test Engineer

As part of our HPE Operations Cybersecurity Lab, the Security Systems/Software E...

Location

Puerto Rico , Aguadilla

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's or Master's degree in Computer Science, Information Systems, or equivalent
Typically 4-6 years experience
Expertise in multiple software systems design tools and languages
Experience of relational database management systems and their query languages (e.g. SQL)
Strong Experience writing software using any modern language and technology stack, i.e Python, Javascript, and frameworks for building APIs and user interfaces
Knowledge of tools like Metasploit, Nmap, Burp Suite, Wireshark, vulnerability scanning tools, network mapping, and packet analysis
Experience in overall architecture of software systems for products, solutions and IT systems
Expertize working in a DevSecOps environment
Knowledge of OWASP Top 10 vulnerabilities, web-based attacks (SQL injection, XSS, CSRF), and web protocols
Experience with encryption methods and their applications

Job Responsibility

Designs security enhancements, updates, and programming changes for portions and subsystems of systems software, including operating systems, compliers, networking, utilities, databases, and Internet-related tools
Analyzes design and determines coding, programming, and integration activities required based on security requirements and general objectives and knowledge of overall architecture of product or solution
Design, develop, test, and maintain robust, scalable, and high-quality security and software solutions
Supports application and systems security strategy, architecture and roadmaps, review application architectures, code and system services from a security perspective
Writes and executes complete security testing plans, protocols, and documentation for assigned portion of application
identifies and debugs, and creates solutions for issues with code and integration into application architecture
Leads a project team of other software systems engineers and internal and outsourced development partners to develop reliable, cost effective and high quality solutions for assigned systems portion or subsystem
Collaborates and communicates with management, internal, and outsourced development partners regarding software systems design status, project progress, and issue resolution
Represents the software systems engineering team for all phases of larger and more-complex development projects
Provides guidance and mentoring to less-

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Senior Security Researcher

Endor Labs is building the Application Security platform for the software develo...

Location

United States

Salary:

Not provided

Endor Labs

Expiration Date

Until further notice

Requirements

5+ years of experience in security research, vulnerability discovery, and offensive security
deep expertise in reverse engineering, exploit development, and software vulnerability analysis
strong understanding of software supply chain security, including package management systems, CI/CD pipelines, and dependency analysis
experience discovering and responsibly disclosing zero-day vulnerabilities
proven track record of publishing high-quality research or presenting at top security conferences (e.g., Black Hat, DEF CON, RSAC, BSides)
proficiency in programming languages such as Python, Rust, or Go
strong analytical skills and the ability to conduct complex security research autonomously
excellent communication skills, both written and verbal, to convey technical concepts to diverse audiences.

Job Responsibility

Conduct offensive security research on software supply chain threats, identifying and analyzing zero-day vulnerabilities
develop and refine exploit techniques to understand modern attack vectors targeting software supply chain through malicious code, 3rd party libraries, and CI/CD systems
work closely with Product Management to translate research findings into innovative security capabilities within Endor Labs' products
publish research findings through technical blogs, white papers, and industry-leading security conferences
collaborate with security engineers and developers to prototype and implement detection and mitigation strategies for emerging threats
contribute to the security community by developing open-source tools, methodologies, or frameworks that enhance software supply chain security
stay ahead of the latest threats, attacker methodologies, and evolving security trends to continuously refine our research efforts.

What we offer

Work with a world-class team dedicated to pushing the boundaries of security research
directly influence the security of modern software supply chains
a culture that values innovation, collaboration, and continuous learning
competitive compensation, flexible work environment, and a generous benefits package
opportunity to present groundbreaking research and contribute to the global security community.

Fulltime

Offensive Security Engineer

Robinhood

Location:
United States , Menlo Park, CA ▼
Bellevue, WA

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
January 13, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Offensive Security Engineer

Engineering Manager, Offensive Security & Vulnerability Management