Senior Offensive Security Engineer

Responsibilities

• Independently manage complete red team exercises.
• Partner with Engineering, Product, IT, and other business functions to drive security improvement across the organization.
• Research emerging attack vectors, vulnerabilities and techniques.
• Utilize offensive skills to identify weaknesses and build defenses against those who may point their attacks at Chime.
• Develop custom payloads and exploits.
• Emulate adversaries like cybercriminals and insider threats by attacking web applications, cloud platforms and supporting services (Kubernetes / Container Orchestration platforms etc.).
• Collaborate closely with detection engineers to build high fidelity alerting based on emerging attack vectors and tactics, techniques and procedures.
• Participate in purple-team exercises to mature the security program.

Requirements

• 4+ years of combined experience in either an offensive security, red teaming, or application security role.
• Experience in conducting surreptitious cloud based attacks.
• Experience with developing custom tools and payloads which bypass defensive products, and remain undetected in a mature network environment.
• Ability to perform unsupervised red team engagements and experience with performing adversarial simulation.
• Ability to explain vulnerabilities and weaknesses to non-technical stakeholders.

Nice to Haves

• Relevant certifications: OSCP (Offensive Security Certified Professional), OSCE (Offensive Security Certified Expert) and OSEE (Offensive Security Exploitation Expert), Certified Red Team Operator (CRTO), GIAC Red Team Professional certification (GRTP).

Compensation

• Base salary: $181,000 - $250,000.
• Full-time employees eligible for bonus, competitive equity package, and benefits.