Greenlight Financial Technology6 дней назад
Старший инженер по оффенсивной безопасности
13 750–16 667 ₽в месяц · до вычета
РЫНОК
16 396 ₽медиана по профессии
Mobile Developer · 23 вакансий с указанной зарплатой
6 000половина предложений: 15 416–19 08423 750
Ниже рынка · выше 22% предложений
Full TimeAtlanta (Remote Friendly)
Обязанности
- 01Lead Technical Strategy: Define the long-term vision for offensive security at Greenlight, moving beyond point-in-time testing to continuous security validation
- 02Red Teaming & Adversary Simulation: Design and execute complex, multi-stage adversary simulations targeting our cloud infrastructure (AWS), mobile applications (iOS/Android), and internal corporate environments
- 03Vulnerability Research: Conduct deep-dive research into high-risk areas of our ecosystem, identifying zero-day vulnerabilities or sophisticated logic flaws that automated tools miss
- 04Pave the Golden Path: Partner with DevOps and Engineering to build automated security guardrails and self-healing infrastructure that prevents common attack vectors from being introduced
- 05Incident Response Support: Work closely with the Detection and Response team to improve our monitoring capabilities by performing purple team exercises to validate alert coverage
- 06Mentorship: Act as a force multiplier by mentoring senior and mid-level engineers, fostering a culture of security-minded development across the entire R&D organization
Требования
- 01Expert-level Offensive Skills: 8+ years of experience in offensive security, red teaming, or penetration testing, with a proven track record of uncovering critical vulnerabilities in complex environments
- 02Cloud Native Expertise: Deep understanding of AWS security architecture, including IAM bypass techniques, container escapes (Kubernetes), and serverless security
- 03Application Security Depth: Experience with manual code review (Node.js, Python, or Go) and bypass techniques for modern web and mobile security controls
- 04Automation Mindset: Ability to script in Python, Bash, or Go to automate exploitation chains or integrate security testing into CI/CD pipelines
- 05Strategic Communication: The ability to translate complex technical risks into business impact for executive stakeholders while remaining a trusted peer to software engineers
- 06Relevant Certifications (Optional but valued): OSCP/OSCE, GXPN, or equivalent demonstration of deep technical skill
- 07An Ethical Hacker at Heart: You are curious, persistent, and think outside the box to find ways around traditional security controls
- 08A Collaborative Partner: You believe that breaking things is only half the job; the real value is in helping the team build them back stronger
- 09Owner Mindset: You take pride in your work and feel a deep sense of responsibility for the safety of our families and their finances
Условия
- 01Medical, dental, vision, and HSA match
- 02Paid life insurance, AD&D, and disability benefits
- 03Traditional 401k with company match
- 04Unlimited PTO
- 05Paid company holidays and pop-up bonus holidays
- 06Professional development stipend
- 07Mental health resources
- 081:1 financial planners
- 09Fertility healthcare
- 10100% paid parental and caregiving leave, plus cleaning service and meals during your leave
- 11Flexible WFH, both remote and in-office opportunities
- 12Fully stocked kitchen, catered lunches, and occasional in-office happy hours
- 13Employee resource groups