Senior Security Engineer, Offensive Security

About the role

Join a remote‑first security team focused on proactively identifying and eliminating threats across products, platforms, and cloud infrastructure. You will apply offensive security expertise to penetration testing, red‑team engagements, threat modeling, exploit development, and security architecture for a global developer audience.

Key responsibilities

• Plan, scope and execute penetration tests, red‑team and adversary‑emulation exercises across SaaS, APIs, cloud and AI/ML products.
• Develop proof‑of‑concept exploits and deliver risk‑rated findings with actionable remediation guidance.
• Retest vulnerabilities to confirm successful remediation and conduct security reviews and threat modeling for new features.
• Build and maintain offensive security tooling, automation, and exploit capabilities to expand testing coverage.
• Partner with engineering to design security architecture, Zero Trust controls and least‑privilege access.
• Support security programs, automated design reviews, vulnerability management and on‑call incident response.

Required profile

• 3+ years of security engineering with hands‑on offensive security and penetration testing.
• 2+ years of software development experience in Python or Golang.
• Deep knowledge of authentication/authorization (OAuth), applied cryptography and Zero Trust principles.
• Practical experience securing cloud environments (AWS, GCP or Azure) and containerized/Kubernetes workloads.
• Strong communication skills to explain complex security concepts to technical and non‑technical stakeholders.

Required skills

• Python
• Golang
• OAuth
• Applied cryptography
• Zero Trust architecture
• AWS, GCP, Azure
• Burp Suite
• OWASP testing frameworks
• Large language models (LLMs) for automated testing
• Kubernetes and container security

What we offer

• Fully remote, remote‑first working environment.
• EU compensation of €118,860–€169,800 per year plus equity.
• Flexible scheduling, generous paid time off and quarterly Whaleness Days.
• Home‑office support, technology stipend and annual learning budget.
• 16 weeks of paid parental leave after six months.
• Comprehensive medical, retirement and holiday benefits (varies by country).