RemoteLeaf Logo
Log in Sign up

Staff Offensive Security Engineer

1 month, 1 week ago
United States
Full-time
Lead
Penetration Tester
Cybersecurity
Android AWS Bash CI/CD Go iOS Kubernetes Node.js Penetration Testing Python
Apply Now
Greenlight

Greenlight

Greenlight is a financial technology company offering a debit card and money app for families, empowering parents to raise financially smart kids through smart spending and investing.

Capital Markets
251-1K
Founded 2014
$556M raised
View All Jobs 9

Description

  • Define Greenlight’s long-term offensive security strategy and continuous validation program.
  • Design and execute complex, multi-stage red team and adversary simulation exercises across AWS, iOS, Android, and corporate environments.
  • Conduct deep vulnerability research to identify zero-day vulnerabilities and sophisticated logic flaws.
  • Partner with DevOps and Engineering to implement automated security guardrails and self-healing infrastructure.
  • Perform purple team exercises with Detection and Response to validate monitoring and alert coverage.
  • Mentor security engineers and promote security-minded development across the R&D organization.

Requirements

  • 8+ years of experience in offensive security, red teaming, or penetration testing, with demonstrated success finding critical vulnerabilities.
  • Deep expertise in AWS security, including IAM bypasses, Kubernetes container escapes, and serverless security.
  • Experience with manual code review in Node.js, Python, or Go and bypassing modern web and mobile security controls.
  • Ability to script in Python, Bash, or Go to automate exploitation chains and integrate testing into CI/CD pipelines.
  • Ability to communicate technical risks in terms of business impact to executive stakeholders and engineering teams.
  • OSCP, OSCE, GXPN, or equivalent certifications demonstrating advanced technical expertise preferred.
  • Curiosity, persistence, ethical-hacking mindset, and ability to think beyond conventional security controls.
  • Collaborative approach focused on helping engineering teams build stronger systems after identifying weaknesses.

Benefits

  • Estimated base salary of $165,000–$200,000 in NY, CA, and WA; $165,000–$185,000 in CO.
  • Discretionary performance bonus and equity rewards.
  • Medical, dental, vision, HSA match, life insurance, disability coverage, and 401(k) match.
  • Unlimited PTO, paid holidays, and bonus holidays.
  • Professional development stipend and mental health resources.
  • Flexible remote and in-office work options.
  • 100% paid parental and caregiving leave, including cleaning services and meals during leave.
  • Fertility healthcare, financial planning support, employee resource groups, catered lunches, and stocked kitchens.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Zyte

Senior Reverse Engineer - Remote

Zyte 251-1K Professional Services

Zyte is hiring a Reverse Engineer to develop scalable tooling, automation, and AI-assisted pipelines that help engineers analyze evolving antibot and browser-fingerprinting systems and ship solutions faster.

Poland Full-time Senior Penetration Tester
Burp Suite C C++ JavaScript LLM Machine Learning Node.js Python Rust Wireshark
1 day, 20 hours ago
DoorDash

Manager, Third-Party Risk Management (TPRM)

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a US-based Third-Party Risk Management Manager to lead its global vendor security risk program, manage TPRM teams, and build AI-enabled workflows across DoorDash, Wolt, and Deliveroo.

United States Full-time Senior Penetration Tester
$164k-$242k
CI/CD Encryption OAuth OpenID Connect Penetration Testing Python SAML Secrets Management SQL
2 days, 19 hours ago
Aspenview Technology Partners

Incident Response Lead

Aspenview Technology Partners Internet Software & Services

AspenView Technology Partners is hiring a US-based Incident Response Lead to direct major incident response and digital forensics for a large consumer lender supported by nearshore security operations teams.

United States Full-time Lead Penetration Tester
AWS Azure Elasticsearch GCP Linux SIEM Splunk
5 days, 19 hours ago
Invicti

Staff Security Researcher (Europe Remote)

Invicti 251-1K Internet Software & Services

Invicti Security is hiring a hands-on Offensive Security Researcher in Europe to research emerging web, cloud, and AI threats and turn findings into accurate, production-ready detection capabilities.

Europe Full-time Lead Penetration Tester
Burp Suite GraphQL HTTP JavaScript Kubernetes Nmap Python REST API
5 days, 20 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers