Senior Offensive Security Engineer Job at Robinhood (Toronto)

Senior Security Researcher

Endor Labs is building the Application Security platform for the software develo...

Location

United States

Salary:

Not provided

Endor Labs

Expiration Date

Until further notice

Requirements

5+ years of experience in security research, vulnerability discovery, and offensive security
deep expertise in reverse engineering, exploit development, and software vulnerability analysis
strong understanding of software supply chain security, including package management systems, CI/CD pipelines, and dependency analysis
experience discovering and responsibly disclosing zero-day vulnerabilities
proven track record of publishing high-quality research or presenting at top security conferences (e.g., Black Hat, DEF CON, RSAC, BSides)
proficiency in programming languages such as Python, Rust, or Go
strong analytical skills and the ability to conduct complex security research autonomously
excellent communication skills, both written and verbal, to convey technical concepts to diverse audiences.

Job Responsibility

Conduct offensive security research on software supply chain threats, identifying and analyzing zero-day vulnerabilities
develop and refine exploit techniques to understand modern attack vectors targeting software supply chain through malicious code, 3rd party libraries, and CI/CD systems
work closely with Product Management to translate research findings into innovative security capabilities within Endor Labs' products
publish research findings through technical blogs, white papers, and industry-leading security conferences
collaborate with security engineers and developers to prototype and implement detection and mitigation strategies for emerging threats
contribute to the security community by developing open-source tools, methodologies, or frameworks that enhance software supply chain security
stay ahead of the latest threats, attacker methodologies, and evolving security trends to continuously refine our research efforts.

What we offer

Work with a world-class team dedicated to pushing the boundaries of security research
directly influence the security of modern software supply chains
a culture that values innovation, collaboration, and continuous learning
competitive compensation, flexible work environment, and a generous benefits package
opportunity to present groundbreaking research and contribute to the global security community.

Fulltime

Cloud Security Senior Analyst

The Cloud Security Operations team works in a multi-disciplinary team of teams d...

Location

Hungary , Budapest

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

5+ years of experience in a similar, offensive security related role
Offensive Security-oriented mindset (threat-modeling, vulnerability assessments, penetration testing, etc.)
Hands-on experience with cloud platforms (GCP, AWS)
Excellent understanding of cloud security concepts/best practices in various cloud Service Providers (for example: Azure/M365)
Familiarity with the current threat landscape which GCP exists in
Familiarity with securing containers and container orchestration frameworks (such as Kubernetes)
Programming/scripting languages a plus (Python and PowerShell preferred, but not required)
Ability to deliver presentations to technical and non-technical individuals
Fluency in English
Bachelor's Degree or equivalent working experience

Job Responsibility

Full end to end security assurance activities in GCP including Vulnerability Assessments (preproduction, post-production), Purple Team exercises (Red and Blue team collaboration) to identify areas of risk and ensure any gaps are documented and remediated
Provide threat modeling and risk assessment services to characterize the risk and severity posture of various systems and components in the cloud environment
Partner with Engineering and Operations teams to create, implement, and apply DevSecOps practices and processes that are consumed by developers across all sectors in Citi

What we offer

Cafeteria Program
Home Office Allowance (for colleagues working in hybrid work models)
Paid Parental Leave Program (maternity and paternity leave)
Private Medical Care Program and onsite medical rooms at our offices
Pension Plan Contribution to voluntary pension fund
Group Life Insurance
Employee Assistance Program
Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
Flexible work arrangements to support you in managing work - life balance
Career progression opportunities across geographies and business lines

Fulltime

Senior Detection Engineer

This is a detection engineering role that leverages knowledge of monitoring, ana...

Location

Singapore , Singapore

Salary:

Not provided

Marriott Bonvoy

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
3+ years of collective experience in Splunk SIEM (Splunk Enterprise Security) threat detection use case development or UEBA (Exabeam) use case development for insider threat use case development
5+ years of experience in security functions such as SOC, CIRT, security engineering, risk management, vulnerability management or technical infrastructure operations, administration, or systems engineering
scripting or programming language, including Python
Current information security certification such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) preferred
offensive and defensive security certifications such as CEH, IGAC Cyber Defense, OSCP or other related certifications preferred
Splunk Certification, including Splunk Enterprise Security Certified Admin preferred
use case development experience on the Exabeam platform preferred
working knowledge of the NIST Cyber Security Framework and ISO/IEC 27001:2022 preferred
working knowledge of the MITRE ATT&CK Framework preferred

Job Responsibility

Lead collaboration sessions within the cyber security tower and other business units to devise security monitoring use cases
engage and collaborate with other security engineers and architects as needed to keep pace with the evolution of corporate infrastructure and applications and share that knowledge with peers as appropriate
document prospective security monitoring use cases with MITRE ATT&ACK mappings using standard templates and methodologies
inform and consult other cyber ops teams of required data onboarding and integrations for use case development
develop analytics, correlation searches, dashboards, reports and alerts within the SIEM and UEBA platforms
solicit feedback for pre-production security monitoring content through peer review process and user acceptance testing for tuning
document developed security monitoring content in a documentation registry using department standard templates and methodologies
manage field mapping and transmission of security monitoring alerts to the security incident response platform for SOC analyst consumption as outlined in process documentation
provide governance support for the content development function entailing content development standards compliance, change management approvals for SIEM or UEBA content, and lifecycle management of developed security monitoring content
service operational requests in queue such as analytics content performance tuning, filtering, search refinement, parsing issues

Fulltime

Senior Penetration Tester

As a Penetration Tester, you'll conduct regular, comprehensive security assessme...

Location

Belgium , Brussels

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Minimum of 5 years' experience in one or more of the following areas: Penetration Tester, Red/Purple Team Member, Security Engineer
Knowledge of technologies up to system level (web frameworks, communications protocols, database systems)
Offensive security knowledge of cyber-attack techniques, vulnerabilities, and mitigation strategies
Knowledge of penetration testing tools, frameworks, and methodology
Skills using Kali Linux, Nmap, PowerShell, Metasploit, Cobalt Strike, OWASP ZAP, Burp Suite
Proficiency in scripting
Awareness of frameworks such as MITRE ATT&CK and NIST and how they can be applied effectively within an enterprise
Familiarity with the latest exploits, tactics, techniques, and procedures (TTP), vulnerability remediation and security trends
Cyber security qualifications from Offensive Security, SANS, Pentester Academy, CREST, eLearnSecurity or others

Job Responsibility

Scoping and executing of complex penetrations test across a wide scope of technologies, products, services, and applications and critical infrastructure companies
Helping the team to define and improve the internal security testing programme
Documenting technical issues both Cyber and IT related during testing assessments
Improve our monitoring services by working in purple style exercises and operating in a red team capacity to improve the ability to detect and respond to threats
Supporting incident response by providing context and expertise around cyber threats
Mentor to our junior & medior colleagues

What we offer

Extensive career development opportunities, both local and international
Part of a dynamic network of 56,000 professionals at all stages of their careers
Wide array of offices to explore

Fulltime

Senior Security Engineer - Offensive Security

We enable Plaid to quickly build safe and secure products while ensuring that Pl...

Location

United States , New York

Salary:

207600.00 - 310800.00 USD / Year

Plaid

Expiration Date

Until further notice

Requirements

5+ years of experience in offensive security roles
Experience leading individual offensive security/red team operations
Comfortable operating independently and defining your own direction
Comfortable communicating with a wide range of technical and non-technical stakeholders

Job Responsibility

Establish a charter and framework for Plaid’s offensive security program
Conduct red team operations against corp and prod infrastructure to identify previously unknown problems and assess the state of Plaid’s security
Communicate findings to stakeholders and follow up to ensure appropriate resolution
Serve as the primary owner for red teaming at Plaid

Fulltime

Senior Security Engineer - Offensive Security

We enable Plaid to quickly build safe and secure products while ensuring that Pl...

Location

United States , San Francisco

Salary:

207600.00 - 310800.00 USD / Year

Plaid

Expiration Date

Until further notice

Requirements

5+ years of experience in offensive security roles
Experience leading individual offensive security/red team operations
Comfortable operating independently and defining your own direction
Comfortable communicating with a wide range of technical and non-technical stakeholders

Job Responsibility

Establish a charter and framework for Plaid’s offensive security program
Conduct red team operations against corp and prod infrastructure to identify previously unknown problems and assess the state of Plaid’s security
Communicate findings to stakeholders and follow up to ensure appropriate resolution
Serve as the primary owner for red teaming at Plaid

Fulltime

Senior Product Security Engineer

Cloud Software Group is one of the world’s largest cloud solution providers, ser...

Location

India , Bengaluru

Salary:

Not provided

Cloud Software Group

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent experience
5+ years of experience in offensive security, penetration testing, or red teaming
Solid understanding of basic networking, web technologies, and computer systems
Familiarity with at least one scripting or programming language (e.g., Python, JavaScript, Bash, PowerShell)
Demonstrated interest in cybersecurity (capture the flag participation, open-source contributions, hacking challenges, security coursework, etc.)
Strong problem-solving and communication skills
Eagerness to learn and adapt in a fast-paced security environment

Job Responsibility

Simulate real-world attacker tactics, techniques, and procedures (TTPs) to assess and improve the security posture of applications, APIs, and infrastructure
Identify, exploit, and document vulnerabilities in products and supporting systems using both manual techniques and automated tools
Develop and execute custom attack scenarios, including phishing, social engineering, and lateral movement campaigns, to test organizational defenses
Prepare comprehensive assessment reports, including reproduction steps and actionable remediation guidance for engineering teams
Stay current with the latest security threats, adversary methodologies (e.g., MITRE ATT&CK framework), and offensive security tooling
Assist in simulating adversary attacks to identify vulnerabilities and logic flaws in web and product features
Help develop automation scripts, tools, and documentation to support security testing activities
Continuously learn and apply the latest security testing techniques, tools, and industry best practices

New