RemoteLeaf Logo
Log in Sign up

Staff Offensive Security Engineer

1 month, 2 weeks ago
United States
Full-time
Lead
Penetration Tester
Cybersecurity
Android AWS Bash CI/CD Go iOS Kubernetes Node.js Penetration Testing Python
Apply Now
Greenlight

Greenlight

Greenlight is a financial technology company offering a debit card and money app for families, empowering parents to raise financially smart kids through smart spending and investing.

Capital Markets
251-1K
Founded 2014
$556M raised
View All Jobs 9

Description

  • Define Greenlight’s long-term offensive security strategy and continuous validation program.
  • Design and execute complex, multi-stage red team and adversary simulation exercises across AWS, iOS, Android, and corporate environments.
  • Conduct deep vulnerability research to identify zero-day vulnerabilities and sophisticated logic flaws.
  • Partner with DevOps and Engineering to implement automated security guardrails and self-healing infrastructure.
  • Perform purple team exercises with Detection and Response to validate monitoring and alert coverage.
  • Mentor security engineers and promote security-minded development across the R&D organization.

Requirements

  • 8+ years of experience in offensive security, red teaming, or penetration testing, with demonstrated success finding critical vulnerabilities.
  • Deep expertise in AWS security, including IAM bypasses, Kubernetes container escapes, and serverless security.
  • Experience with manual code review in Node.js, Python, or Go and bypassing modern web and mobile security controls.
  • Ability to script in Python, Bash, or Go to automate exploitation chains and integrate testing into CI/CD pipelines.
  • Ability to communicate technical risks in terms of business impact to executive stakeholders and engineering teams.
  • OSCP, OSCE, GXPN, or equivalent certifications demonstrating advanced technical expertise preferred.
  • Curiosity, persistence, ethical-hacking mindset, and ability to think beyond conventional security controls.
  • Collaborative approach focused on helping engineering teams build stronger systems after identifying weaknesses.

Benefits

  • Estimated base salary of $165,000–$200,000 in NY, CA, and WA; $165,000–$185,000 in CO.
  • Discretionary performance bonus and equity rewards.
  • Medical, dental, vision, HSA match, life insurance, disability coverage, and 401(k) match.
  • Unlimited PTO, paid holidays, and bonus holidays.
  • Professional development stipend and mental health resources.
  • Flexible remote and in-office work options.
  • 100% paid parental and caregiving leave, including cleaning services and meals during leave.
  • Fertility healthcare, financial planning support, employee resource groups, catered lunches, and stocked kitchens.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

VerTalents

Sr. Offensive Security Consultant (Alpha Group)

VerTalents Internet Software & Services

VerSprite, through VerTALENTS, is seeking a remote U.S.-based Senior Offensive Security Consultant to lead advanced penetration testing, application security, and red team engagements for enterprise clients.

United States Full-time Senior Penetration Tester
Active Directory Android AWS Azure iOS Penetration Testing
2 days, 2 hours ago
Insider

Senior Security Engineer - Red Team (Remote)

Insider Internet Software & Services

Insider One is hiring a Security Engineer – Red Team to assess and strengthen the security of its AI-powered customer engagement platform through offensive security testing and collaboration with engineering teams.

Turkey Full-time Mid Level Penetration Tester
Agile JavaScript OWASP Penetration Testing PHP Python REST API
2 days, 3 hours ago
Zyte

Senior Reverse Engineer - Remote

Zyte 251-1K Professional Services

Zyte is hiring a Reverse Engineer to develop scalable tooling, automation, and AI-assisted pipelines that help engineers analyze evolving antibot and browser-fingerprinting systems and ship solutions faster.

Poland Full-time Senior Penetration Tester
Burp Suite C C++ JavaScript LLM Machine Learning Node.js Python Rust Wireshark
4 days, 3 hours ago
DoorDash

Manager, Third-Party Risk Management (TPRM)

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a US-based Third-Party Risk Management Manager to lead its global vendor security risk program, manage TPRM teams, and build AI-enabled workflows across DoorDash, Wolt, and Deliveroo.

United States Full-time Senior Penetration Tester
$164k-$242k
CI/CD Encryption OAuth OpenID Connect Penetration Testing Python SAML Secrets Management SQL
5 days, 2 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers