Offensive Security Engineers

Freddie Mac is hiring Offensive Security Engineers to strengthen its organizational defenses through advanced offensive security work. The role designs AI-powered security tools, conducts red team assessments, addresses vulnerabilities, and promotes secure engineering practices.

Responsibilities:

• Applications should bring knowledge into one or more domains, including web applications, AI-powered business systems, cloud environments, etc
• Execute sophisticated red team assessments across diverse attack surfaces
• Partner with internal stakeholders to define engagement scope, success criteria, and translate complex technical findings into actionable business risk narratives
• Research, develop, and maintain cutting-edge offensive security tools and automation frameworks to enhance team capabilities and operational efficiency

Requirements:

• Applications should bring knowledge into one or more domains, including web applications, AI-powered business systems, cloud environments, etc
• Proven ability to critically examine applications and identify, exploit, and remediate complex vulnerabilities
• Proven ability to create automation workflows that scale to enterprise environments
• Demonstrated expertise in bypassing modern defensive controls and security measures to achieve assessment objectives
• Demonstrate proficiency in chosen domain using public research, personal blog, active projects, bug bounty, and public disclosures