Staff Engineer, Offensive Security Job at Stytch

Staff Security Engineer

Credit Genie is a mobile-first financial wellness platform designed to help indi...

Location

United States , New York, NY; Philadelphia, PA; Plymouth Meeting, PA; Pittsburgh, PA; San Francisco, CA

Salary:

150000.00 - 250000.00 USD / Year

Credit Genie

Expiration Date

Until further notice

Requirements

BS/MS/PhD in a Computer Science, Engineering or related scientific field or equivalent professional experience
Passionate about advocating for and implementing solutions to complex problems, at-scale, in a large multi-cloud environment
Prior experience in Development Operations, Software Engineering, Systems Engineering, Security Architecture, Cloud Security or Offensive Security
Fluent in one or more modern coding languages (Python, Go, Java, JavaScript, etc.)
Experience with one or more infrastructure as code tools (Terraform, Ansible, etc.)
Experience with AWS, GCP, Azure and/or containers (e.g. Kubernetes)
Able to work both independently and collaboratively, willing to work in a fast paced, high growth environment

Job Responsibility

Design new and improve existing security tools, ensure their operational reliability, adherence to SLAs, and strengthen the organization’s security posture through proactive monitoring and continuous improvement
Drive innovation by automating security processes and developing advanced methods for analyzing and responding to security findings
Maintain and refine custom cloud security baselines, develop and implement cloud security policies and detection rules. Build security controls that detect, prevent, and correct cloud vulnerabilities
Collaborate closely with engineering teams to ensure security is embedded into solution design and deployment from the ground up
Empathize with the full spectrum of our customers and our engineers by advocating for effective solutions that scale with the needs of our business and our customers
Lead threat modeling, vulnerability assessments, and penetration testing to identify and address security risks proactively. Monitor security logs and alerts to detect anomalies and coordinate incident investigations
Develop and maintain incident response plans, ensuring rapid detection, analysis, and mitigation of security threats

What we offer

Offers Equity
Offers Bonus
100% company-paid medical, dental, and vision coverage for you and your dependents on your first day of employment
Receive up to $100 per month in fitness reimbursement or enjoy a complimentary full membership to LifeTime Fitness or Equinox
401(k) with a 3.5% match and immediate vesting
Meal program available for both lunch and dinner
Pre-tax benefits, including a $1,000 HSA match
Life and accidental insurance
Flexible PTO

Fulltime

Staff Offensive Security Engineer

At GEICO, we offer a rewarding career where your ambitions are met with endless ...

Location

United States , Chevy Chase; Palo Alto; Seattle

Salary:

115000.00 - 230000.00 USD / Year

Geico

Expiration Date

Until further notice

Requirements

Mastery of vulnerability discovery and exploitation across applications, networks, and cloud using tools (e.g., Burp Suite, Metasploit), and custom scripts (Python, PowerShell)
Advanced understanding of OWASP, MITRE ATT&CK framework, software development lifecycle (SDLC), threat modeling, red/purple teaming, and attack path development
Hands-on experience with tools like Cobalt Strike, Mythic, BloodHound, and AutoSploit
Relevant professional security certifications (e.g. from GIAC or others)
Proven experience in achieving results efficiently through automation and establishing best practices
Proven track record to deliver business outcomes for meeting regulatory and compliance obligations
Ability to force multiply through coaching and mentorship to offensive security engineers across all functions (penetration testing, red teaming, purple teaming)
8+ years in engineering focused role, preferably in the tech industry
5+ years of experience in offensive security (penetrating testing, red team, and purple team)
5+ years of hands-on experience performing penetration-testing, red teaming, and purple teaming activities

Job Responsibility

Lead highly effective large-scale penetration testing initiatives
Participate in simulating real-world cyber-attacks (red teaming), and collaborating with defensive security teams (purple teaming)
Conduct tactical security penetration test assessments to validate the security of company applications (web, mobile, APIs, and AI products) against OWASP Top 10 threats and work with the Application Security team to provide feedback and recommendations to increase automated capabilities
Ensure penetration testing activities are meeting security, business, and compliance objectives and outcomes
Design and execute advanced threat emulation scenarios, including physical, social, and digital attack vectors
Collaborate with Blue Teams, Threat Intelligence, and Risk Management to ensure comprehensive attack coverage and feedback loops
Ensure operations align with industry regulations and compliance standards such as NIST, PCI DSS, and NYDFS
Champion continuous improvement and innovation in penetration testing, adversary simulation techniques, tools, and methodologies

What we offer

Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family’s overall well-being
Financial benefits including market-competitive compensation
a 401K savings plan vested from day one that offers a 6% match
performance and recognition-based incentives
and tuition assistance
Access to additional benefits like mental healthcare as well as fertility and adoption assistance
Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year

Fulltime

Senior Staff Cloud Security Engineer

GEICO is seeking a Senior Staff Cloud Security Engineer to provide strategic and...

Location

United States , Chevy Chase; Palo Alto; Seattle

Salary:

130000.00 - 260000.00 USD / Year

Geico

Expiration Date

Until further notice

Requirements

Deep technical expertise in public and private cloud compute infrastructure and cloud native technologies
Previous successful projects that iteratively transitioned legacy security models to next generation solutions
Deep technical knowledge of security threats, risks, and vulnerabilities within IaaS, PaaS, and SaaS environments and integrations
Experience in offensive and defensive security roles, with a strong hacker approach to guiding cloud security decisions
Experience communicating and presenting to senior and junior staff with the ability to influence stakeholders
Experience in a multi-platform environment with containerized or VM-based Linux and Windows
Experience with Container risk monitoring at both build and runtime
Experience with solving security control requirements with engineering approaches
Ability to excel in a fast-paced, startup-like environment
Ability to design, perform experiments, and influence security detection and protection solutions

Job Responsibility

Provide strategic and technical security direction in designing, implementing, and managing secure cloud infrastructures
Develop and maintain expertise in cloud-native security solutions, including container security, Kubernetes, Istio, and cloud networking and security services
Define and implement roadmaps for security enhancements, ensuring alignment with business objectives and minimal disruption to operations
Develop strong relationships with key stakeholders, including development teams, operations teams, and executive sponsors
Collaborate with various teams to design, deploy, troubleshoot, and enhance security measures, while balancing usability and security
Influence and educate staff at all levels on cloud security best practices, promoting a culture of cloud security awareness across the organization
Proactively identify opportunities to enhance security measures, streamline processes, and optimize tooling, leveraging an offensive security mindset
Support continuous improvement of our cloud security posture through innovative solutions
Mentor/train growing security engineers and provide technical direction and project leadership

What we offer

Comprehensive Total Rewards program that offers personalized coverage tailor-made for you and your family’s overall well-being
Financial benefits including market-competitive compensation
a 401K savings plan vested from day one that offers a 6% match
performance and recognition-based incentives
and tuition assistance
Access to additional benefits like mental healthcare as well as fertility and adoption assistance
Supports flexibility- We provide workplace flexibility as well as our GEICO Flex program, which offers the ability to work from anywhere in the US for up to four weeks per year

Fulltime

Staff Offensive Security Engineer

Join us in building the future of finance. Our mission is to democratize finance...

Location

United States , Menlo Park

Salary:

217000.00 - 255000.00 USD / Year

Robinhood

Expiration Date

Until further notice

Requirements

8+ years of Red Team experience
Experience mentoring other team members
Passion and demonstrated experience for challenging security assumptions
Excellent written and verbal communication skills and ability to communicate your findings at many different levels of abstraction from Engineers to Executives
Passion for fixing security issues and not just identifying security issues
Familiarity with common network protocols and standards such as DNS and TCP/IP
Experience with MacOS and Linux
Experience with leveraging components of a modern software development stack to attack companies, including CI, container orchestration systems (Kubernetes/Docker), cloud providers (AWS, GCP), etc and be able to give hardening suggestions
Experience/knowledge of defensive tools/techniques (IDS/IPS, Packet Capture, Network Analysis, AV, EDR, etc.) and how to evade them
Deep understanding of Mitre’s ATT&CK Framework

Job Responsibility

Evangelize the Offensive Security Team’s Findings and Projects with stakeholders throughout the company and collaborate with other teams to create solutions that balance security with other priorities
Mentor and provide guidance to the members of the Offensive Security team
Utilize threat modeling to identify threats and shape Red Team priorities and exercises
Plan and execute long term, broadly scoped, black box Red Team exercises utilizing vulnerability research, exploit development, and utilizing public proof of concept code
Perform penetration testing, code reviews, and design/architecture reviews
Write tooling to assist with and automate Red Team assessments
Plan and participate in Adversarial Simulation exercises with various security teams
Lead Security Incidents when Pentest or Red Team findings require them
Publish blog posts and present talks at security conferences

What we offer

Market competitive and pay equity-focused compensation structure
100% paid health insurance for employees with 90% coverage for dependents
Annual lifestyle wallet for personal wellness, learning and development, and more
Lifetime maximum benefit for family forming and fertility benefits
Dedicated mental health support for employees and eligible dependents
Generous time away including company holidays, paid time off, sick time, parental leave, and more
Lively office environment with catered meals, fully stocked kitchens, and geo-specific commuter benefits
Bonus opportunities
Equity

Fulltime

Staff Offensive Security Engineer

Join us in building the future of finance. Our mission is to democratize finance...

Location

United States , Menlo Park

Salary:

217000.00 - 255000.00 USD / Year

Robinhood

Expiration Date

Until further notice

Requirements

8+ years of Red Team experience
Experience mentoring other team members
Passion and demonstrated experience for challenging security assumptions
Excellent written and verbal communication skills and ability to communicate your findings at many different levels of abstraction from Engineers to Executives
Passion for fixing security issues and not just identifying security issues
Familiarity with common network protocols and standards such as DNS and TCP/IP
Experience with MacOS and Linux
Experience with leveraging components of a modern software development stack to attack companies, including CI, container orchestration systems (Kubernetes/Docker), cloud providers (AWS, GCP), etc and be able to give hardening suggestions
Experience/knowledge of defensive tools/techniques (IDS/IPS, Packet Capture, Network Analysis, AV, EDR, etc.) and how to evade them
Deep understanding of Mitre’s ATT&CK Framework

Job Responsibility

Evangelize the Offensive Security Team’s Findings and Projects with stakeholders throughout the company and collaborate with other teams to create solutions that balance security with other priorities
Mentor and provide guidance to the members of the Offensive Security team
Utilize threat modeling to identify threats and shape Red Team priorities and exercises
Plan and execute long term, broadly scoped, black box Red Team exercises utilizing vulnerability research, exploit development, and utilizing public proof of concept code
Perform penetration testing, code reviews, and design/architecture reviews
Write tooling to assist with and automate Red Team assessments
Plan and participate in Adversarial Simulation exercises with various security teams
Lead Security Incidents when Pentest or Red Team findings require them
Publish blog posts and present talks at security conferences

What we offer

Market competitive and pay equity-focused compensation structure
100% paid health insurance for employees with 90% coverage for dependents
Annual lifestyle wallet for personal wellness, learning and development, and more
Lifetime maximum benefit for family forming and fertility benefits
Dedicated mental health support for employees and eligible dependents
Generous time away including company holidays, paid time off, sick time, parental leave, and more
Lively office environment with catered meals, fully stocked kitchens, and geo-specific commuter benefits

Fulltime

Staff Engineer Application Security

At Appen, we are at the forefront of data annotation and AI innovation, powering...

Location

India , Hyderabad

Salary:

Not provided

Appen

Expiration Date

Until further notice

Requirements

Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field
10+ years of experience in Application Security, including secure software development and architecture
Strong knowledge of secure coding practices, OWASP Top 10, and common application vulnerabilities
Hands-on experience with security tools such as Snyk, SonarCloud, Burp Suite, Nessus, and others
Threat detection and incident response: familiar with security incidents, ability to develop proactive strategies to mitigate risks through close collaboration with teams
Familiarity with cloud security principles, preferably in AWS environments
Experience with CI/CD pipelines and integrating security into DevOps workflows (DevSecOps)
Strong scripting and automation skills (e.g., Python, Bash, or similar)
Excellent problem-solving skills and the ability to think like an attacker
Relevant certifications such as CISSP, OSCP, CEH, or similar are highly desirable

Job Responsibility

Lead the design and implementation of application security architecture across our SaaS platforms
Conduct security assessments, threat modelling, and code reviews to identify and mitigate vulnerabilities
Perform technical security assessments and reviews, research, uncover, and reproduce vulnerabilities, design secure protocols and systems, and write tests and fuzzers to drive architecture changes
Collaborate with Engineering and Platform teams to integrate security best practices into the CI/CD pipeline
Perform penetration testing, security audits, and vulnerability assessments
Develop and maintain secure coding standards, guidelines, and training programs for engineering teams
Implement and manage security tools such as SAST, DAST, and other security automation solutions
Stay up to date with emerging security threats, technologies, and industry best practices
Respond to security incidents and work with incident response teams to investigate and remediate issues
Mentor and guide junior security engineers, fostering a culture of security awareness and continuous improvement

Fulltime

Staff Platform Security Engineer

Fivetran is building data pipelines to power the modern data stack for thousands...

Location

United States , Oakland

Salary:

196033.00 - 245041.50 USD / Year

Fivetran

Expiration Date

Until further notice

Requirements

Application Security Expertise: Deep expertise in identifying and mitigating security vulnerabilities within applications (e.g., OWASP Top 10), particularly in Java codebases.
Secure SDLC: Extensive experience integrating security into the software development lifecycle, from design and code review to testing and deployment.
Java Proficiency: Senior-level experience with Java codebases: building, running, profiling, and optimizing Java applications in secure environments.
Container Security: Strong experience with Docker image creation, optimization, and vulnerability mitigation, specifically for applications.
CI/CD & Automation: Proficiency with CI/CD tools (e.g., Jenkins, GitLab CI, GitHub Actions) and experience integrating security tools into automated pipelines.
Tooling Familiarity: Familiarity with a range of security tools for CI/CD security, static analysis (SAST), dynamic analysis (DAST), dependency analysis (SCA), and secrets management.
Adversarial AI & Defense: Familiarity with modern attack techniques, offensive security methodologies, and defense strategies, including OWASP Top 10 for LLMs (e.g., Prompt Injection, Data Poisoning, and Model Inversion).
Scripting: Proficiency in scripting or programming languages (e.g., Bash, Python, Go) to automate security processes and tool integration.
Problem-Solving: Excellent problem-solving and troubleshooting skills, with the ability to work independently in fast-paced environments.
Communication: Strong communication skills with the ability to effectively collaborate with and educate engineering teams on security principles and best practices.

Job Responsibility

Collaborate with engineering teams to integrate and manage security tooling within the SDLC, strategically automating security checks and feedback loops to enhance efficiency and security posture.
Perform vulnerability scanning and participate in penetration testing exercises, automating scanning processes judiciously to identify common weaknesses, while reserving manual efforts for complex and nuanced assessments. Report findings and assist with remediation efforts.
Develop and maintain automation scripts and infrastructure-as-code for security checks related to machine configurations, container images, IAM policies, firewall rules, and cloud storage policies.
Implement and configure security controls within enterprise applications based on security best practices and architectural guidance.
Contribute to threat modeling efforts by providing technical insights and implementing identified security controls.
Work directly with engineering teams to troubleshoot and resolve security challenges across the stack while promoting a security-first mindset, identifying and automating recurring troubleshooting steps or remediation processes where it significantly improves response times and reduces manual intervention.
Implement and operationalize security solutions for cloud-native and hybrid infrastructure based on architectural guidelines.
Collaborate with infrastructure and cloud security teams to implement and maintain security controls across the entire technology stack, strategically prioritizing automation for consistent enforcement, monitoring, and alerting to improve overall security and reduce manual overhead.
Implement and manage security assessment tools, including vulnerability scanners, SIEM agents, DLP endpoints, and EDR sensors.
Participate in security assessment reviews by providing practical implementation feedback and identifying potential operational challenges.

What we offer

100% employer-paid medical insurance*
Generous paid time-off policy (PTO), plus paid sick time, inclusive parental leave policy, holidays, and volunteer days off
RSU stock grants*
Professional development and training opportunities
Company virtual happy hours, free food, and fun team-building activities
Monthly cell phone stipend
Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents.

Fulltime

Staff Platform Security Engineer

Fivetran is building data pipelines to power the modern data stack for thousands...

Location

United States , Denver

Salary:

171389.00 - 214236.00 USD / Year

Fivetran

Expiration Date

Until further notice

Requirements

Application Security Expertise: Deep expertise in identifying and mitigating security vulnerabilities within applications (e.g., OWASP Top 10), particularly in Java codebases
Secure SDLC: Extensive experience integrating security into the software development lifecycle, from design and code review to testing and deployment
Java Proficiency: Senior-level experience with Java codebases: building, running, profiling, and optimizing Java applications in secure environments
Container Security: Strong experience with Docker image creation, optimization, and vulnerability mitigation, specifically for applications
CI/CD & Automation: Proficiency with CI/CD tools (e.g., Jenkins, GitLab CI, GitHub Actions) and experience integrating security tools into automated pipelines
Tooling Familiarity: Familiarity with a range of security tools for CI/CD security, static analysis (SAST), dynamic analysis (DAST), dependency analysis (SCA), and secrets management
Adversarial AI & Defense: Familiarity with modern attack techniques, offensive security methodologies, and defense strategies, including OWASP Top 10 for LLMs (e.g., Prompt Injection, Data Poisoning, and Model Inversion)
Scripting: Proficiency in scripting or programming languages (e.g., Bash, Python, Go) to automate security processes and tool integration
Problem-Solving: Excellent problem-solving and troubleshooting skills, with the ability to work independently in fast-paced environments
Communication: Strong communication skills with the ability to effectively collaborate with and educate engineering teams on security principles and best practices

Job Responsibility

Collaborate with engineering teams to integrate and manage security tooling within the SDLC, strategically automating security checks and feedback loops to enhance efficiency and security posture
Perform vulnerability scanning and participate in penetration testing exercises, automating scanning processes judiciously to identify common weaknesses, while reserving manual efforts for complex and nuanced assessments. Report findings and assist with remediation efforts
Develop and maintain automation scripts and infrastructure-as-code for security checks related to machine configurations, container images, IAM policies, firewall rules, and cloud storage policies
Implement and configure security controls within enterprise applications based on security best practices and architectural guidance
Contribute to threat modeling efforts by providing technical insights and implementing identified security controls
Work directly with engineering teams to troubleshoot and resolve security challenges across the stack while promoting a security-first mindset, identifying and automating recurring troubleshooting steps or remediation processes where it significantly improves response times and reduces manual intervention
Implement and operationalize security solutions for cloud-native and hybrid infrastructure based on architectural guidelines
Collaborate with infrastructure and cloud security teams to implement and maintain security controls across the entire technology stack, strategically prioritizing automation for consistent enforcement, monitoring, and alerting to improve overall security and reduce manual overhead
Implement and manage security assessment tools, including vulnerability scanners, SIEM agents, DLP endpoints, and EDR sensors
Participate in security assessment reviews by providing practical implementation feedback and identifying potential operational challenges

What we offer

100% employer-paid medical insurance*
Generous paid time-off policy (PTO), plus paid sick time, inclusive parental leave policy, holidays, and volunteer days off
RSU stock grants*
Professional development and training opportunities
Company virtual happy hours, free food, and fun team-building activities
Monthly cell phone stipend
Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents

Fulltime

Staff Engineer, Offensive Security

Stytch

Location:
Ireland

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
April 12, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Staff Engineer, Offensive Security

Staff Security Engineer

Staff Offensive Security Engineer

Senior Staff Cloud Security Engineer

Staff Offensive Security Engineer

Staff Offensive Security Engineer

Staff Engineer Application Security

Staff Platform Security Engineer

Staff Platform Security Engineer

Staff Engineer, Offensive Security

Stytch

Location:Ireland

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:April 12, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Staff Engineer, Offensive Security

Staff Security Engineer

Staff Offensive Security Engineer

Senior Staff Cloud Security Engineer

Staff Offensive Security Engineer

Staff Offensive Security Engineer

Staff Engineer Application Security

Staff Platform Security Engineer

Staff Platform Security Engineer

Location:
Ireland

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
April 12, 2026