Senior Offensive Security Engineer

Summary

Join Praetorian, a cybersecurity company, and work alongside top minds in the industry. You will contribute to challenging offensive security projects for diverse clients, ranging from cryptocurrency exchanges to space telescopes. This role involves identifying vulnerabilities, developing exploits and tools, creating mitigation strategies, and reporting findings. You'll collaborate with the security community and mentor other engineers. Praetorian offers a competitive salary, equity, and comprehensive benefits.

Requirements

• Demonstrated passion for offensive security and adversarial engineering
• 2+ years of Cloud Security experience in AWS, Azure and/or GCP
• Understanding of threat models, attack paths and intelligence considerations within the scoping of technical projects
• Ability to write technical reports and present technical findings both internally and externally
• OSCP, AWS Security Specialty, Azure Security AZ-500, GCP Pro Security, GCP Pro DevOps, Azure AZ-400, AWS DevOps Pro, CKA, CKS OSCE, OSEE, or OSWE certifications

Responsibilities

• Provide technical execution on challenging offensive security projects for our customers
• Identify nuanced vulnerabilities in advanced systems
• Develop custom methodologies, payloads, exploits, and tools to ensure project success
• Develop documentation for novel mitigation strategies to emerging or undocumented security risks identified in client environments
• Develop comprehensive reports and presentations for our customers
• Serve as a mentor to other engineers in their technical and professional development
• Collaborate with the security community to develop novel attack techniques, tactics, and procedures (TTPs) through Praetorian’s Security Blog and other forms of community engagement

Preferred Qualifications

• Prior security consulting experience
• Software development experience in core offsec languages such as golang or python
• Capture-the-flag, CCDC, CPTC or other security related competitions
• Ranked achievements on testing platforms such as Hack the Box, Tryhackme, Portswigger and similar
• Track record in vulnerability research, exploit development, and CVE assignments
• Demonstrated open source contribution with git commits to popular offsec projects
• Security community experience via presentations, conference attendance, blogs, white papers and similar
• PNPT, BSCP, OSCP, OSWE, OSCE, OSEP, OSED, CRTO, cloud certifications and similar
• Bachelors degree in computer science, computer engineering, mathematics, or physics
• Additional experience in at least 3 of the following: Product Security Testing (Application, Mobile, LLM)
• Network Security Testing and/or Red Team
• Web Application Penetration Testing
• IoT Security (Embedded, Firmware, Wireless)
• Secure Code Review
• Reverse Engineering
• Vulnerability Research/ Exploit Development
• Experience with startup and/or high-tech companies
• Familiarity with container orchestration technologies such as Kubernetes

Benefits

• Competitive salary
• Equity Incentive Plan, offering ownership stakes in the company
• Continuous learning opportunities through our internal Learning & Development (L&D) program, including training, certifications, and conferences to support your career growth
• Recognition and rewards for speaking engagements at industry events and conferences
• Comprehensive health and dental insurance coverage
• Immediate 401(k) matching
• Paid maternity and paternity leave