Senior Offensive Security Engineer

Huntress is a remote-first cybersecurity company founded by former NSA cyber operators, dedicated to making enterprise-grade cybersecurity accessible to businesses of all sizes. As a Senior Offensive Security Engineer, you will assess the company's defenses against attacks, conduct penetration tests, and collaborate with internal teams to enhance security measures.

Responsibilities:

• Plan, design, and execute red (and purple) team engagements to simulate advanced adversarial tactics and techniques
• Perform in-depth penetration tests on web applications, endpoint agents, internal systems, and our people
• Utilize a mix of traditional scripting and generative AI platforms to rapidly prototype tools, replicate sophisticated cyber threats, and automate repetitive workflows during live engagements
• Conduct social engineering campaigns to evaluate human vulnerabilities
• Collaborate closely with the Security Operations Center and CSIRT teams to enhance detection and response capabilities
• Stay informed on emerging threats and update red teaming methodologies
• Partner with Product Security to prioritize testing efforts for new releases
• Analyze and exploit vulnerabilities through detailed operational logging, leveraging strong documentation and communication skills to translate complex technical findings into actionable remediation guidance that directly hardens the organization's security
• Develop and deliver detailed technical and executive-level reports post-engagement
• Integrate red team tools, techniques, and processes into a broader security strategy
• Lead or participate in after-action reviews to identify lessons learned
• Assist in designing and implementing security controls based on red team findings

Requirements:

• 3+ years of experience as an offensive security professional
• A documentation-first mindset
• Deep knowledge of adversarial tradecraft
• Expert knowledge of cloud computing platforms (AWS, Azure)
• Skills in scripting languages
• Experience communicating findings that inform defenses
• A pragmatic approach to problem solving
• Experience working in a primarily macOS environment is a significant asset