Jobs in the United States

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added 7 mins ago
Process Engineer | Scientist - Materials Processing & Metallization
Novex, LLC
Bellingham, WA
We are seeking a motivated, curious, and hands-on Process Engineer with at least five years of relevant experience in materials processing, metallurgical process development, or related…
Added 9 mins ago
PG
1000 Hour IT Systems Support Technician
Prince George's County Government
Bowie, MD · Greater Landover, MD
- $68,788 to $88,434 USD / year
…to fill a 1000-Hour IT Systems Support Technician (Info Tech Engineer 2G) position, grade G21, within its Public Safety Communications/Technical Services…
Added 11 mins ago
Systems Engineer 4
Lam Research
Fremont
‘Virtual Flex’ you’ll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time
Added 21 mins ago
Full-Stack Engineer 4 (Java, Spring Boot, AWS) (Enterprise Platforms Technology)
Capital One
Plano, TX
Proactively identify areas for improvement, implementing targeted refactoring and contributing to efforts that reduce technical debt and enhance system performance
Added 21 mins ago
Full-Stack Engineer 4 (Java, Python, Cloud) (Enterprise Platforms Technology)
Capital One
McLean, VA
Proactively identify areas for improvement, implementing targeted refactoring and contributing to efforts that reduce technical debt and enhance system performance
Added 44 mins ago
Drone Battery Pack Design Engineer II, Prime Air
Amazon.com Services LLC
Seattle, WA
This position requires an engineer who demonstrates strong technical depth in battery pack design while also exhibiting the system-level thinking and influence characteristic of our most…
Added 54 mins ago
Quality Supervisor - Ann Arbor Area
The Pivot Group Network
Ann Arbor · Ann Arbor, MI
Quality Control Supervisor, Quality Manager, Quality Engineer, Quality Assurance Manager, Inspection Supervisor, Quality Team Lead, Supplier Quality Engineer, Manufacturing Quality…
Added 54 mins ago
Quality Supervisor - Menominee Area
The Pivot Group Network
Menominee · Menominee, MI
Inspection Supervisor, Quality Team Lead, Supplier Quality Engineer, Manufacturing Quality Supervisor, Quality Assurance Supervisor, Quality Control Supervisor, Quality Manager, Quality…
Added 54 mins ago
PLC Programmer - Gladwin Area
The Pivot Group Network
Gladwin · Gladwin, MI
Troubleshoot PLC and control system issues on the production floor.
Added 54 mins ago
Six Sigma Black Belt - Escanaba Area
The Pivot Group Network
Escanaba · Escanaba, MI
Develop and update control plans and standard work.
Added 55 mins ago
Electrical Applications Engineer – Motor Controls & Drives
Jobgether
Remote, United States
The Electrical Applications Engineer will develop technical proposals and customized motor control and drive solutions for key accounts and strategic partners. This role combines electrical…
Added 56 mins ago
Quality Supervisor - Monroe Area
The Pivot Group Network
Monroe · Monroe, MI
Quality Engineer, Quality Assurance Manager, Inspection Supervisor, Quality Team Lead, Supplier Quality Engineer, Manufacturing Quality Supervisor, Quality Assurance Supervisor, Quality…
Added 56 mins ago
PLC Programmer - Detroit Area
The Pivot Group Network
Detroit · Detroit, MI
Troubleshoot PLC and control system issues on the production floor.
Added 56 mins ago
Quality Manager - Escanaba Area
The Pivot Group Network
Escanaba · Escanaba, MI
Continuous Improvement Manager, Manufacturing Quality Engineer, Quality Assurance Manager, Quality Control Manager, Quality Engineer, Quality Systems Manager, Plant Quality Manager,…
Added 56 mins ago
Field Service Technician - Bad Axe Area
The Pivot Group Network
Bad Axe · Bad Axe, MI
Troubleshoot mechanical, electrical, and control system faults on site.
Added 59 mins ago
PLC Programmer - Monroe Area
The Pivot Group Network
Monroe · Monroe, MI
Troubleshoot PLC and control system issues on the production floor.
Added 1 hour ago
Quality Engineer
Promega
Madison, WI
YOUR ROLE: As a Quality Engineer, you'll lead quality system improvement projects for Promega's medical device business, work governed by ISO 13485 and FDA's Quality Management System…
Added 1 hour ago
RU
Automation Engineer I
Resilience US, LLC
West Chester, OH
- $60,000 to $90,000 USD / year
The Automation Engineer I role is a professional engineer who provides technical and project management support to colleagues in an area of expertise within the engineering function.
Added 1 hour ago
Validation Engineer - Coldwater Area
The Pivot Group Network
Coldwater · Coldwater, MI
Computer System Validation Specialist, Regulatory Affairs Specialist, Quality Assurance Engineer, Quality Engineer, Process Validation Engineer, Equipment Qualification Engineer, Compliance…
Added 1 hour ago
Validation Engineer - Dearborn Area
The Pivot Group Network
Dearborn · Dearborn, MI
Manufacturing Quality Engineer, Test Engineer, Computer System Validation Specialist, Regulatory Affairs Specialist, Quality Assurance Engineer, Quality Engineer, Process Validation…
Added 1 hour ago
Advanced Quality Engineer - Wixom Area
The Pivot Group Network
Wixom · Wixom, MI
Are you a seasoned professional with a passion for excelling as a advanced quality engineer? The Pivot Group Network, a Michigan manufacturing-focused recruiting group, is committed to…
Added 1 hour ago
PLC Programmer - Cheboygan Area
The Pivot Group Network
Cheboygan · Cheboygan, MI
Troubleshoot PLC and control system issues on the production floor.
Added 1 hour ago
Field Service Technician - Iron Mountain Area
The Pivot Group Network
Iron Mountain · Iron Mountain, MI
Troubleshoot mechanical, electrical, and control system faults on site.
Added 1 hour ago
Six Sigma Black Belt - Monroe Area
The Pivot Group Network
Monroe · Monroe, MI
Develop and update control plans and standard work.
Added 1 hour ago
Validation Engineer - Niles Area
The Pivot Group Network
Niles · Niles, MI
Computer System Validation Specialist, Regulatory Affairs Specialist, Quality Assurance Engineer, Quality Engineer, Process Validation Engineer, Equipment Qualification Engineer, Compliance…

Jobgether

Senior Security Engineer, Offensive Security & Remediation

Remote, United States

$180,000 to $195,000 USD / year

Apply on jobs.lever.co About employer

Applications open in a new tab.

Job details

Pay: $180,000 to $195,000 USD / year
Posting language: English
Posted: Nov 12, 2026

Original job description

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior Security Engineer, Offensive Security & Remediation based in the United States .

The Senior Security Engineer will play a key role in strengthening application, infrastructure, and product security through continuous offensive testing and hands-on remediation. This position is heavily focused on identifying vulnerabilities across TypeScript applications, APIs, and AWS environments, while translating findings into practical, lasting security improvements. You will lead penetration testing and red team activities, simulate realistic attack scenarios, and assess emerging risks associated with AI-powered applications and tools. Alongside offensive work, you will contribute directly to secure engineering by developing fixes, automated safeguards, and reusable security patterns. Working within a small, engineering-focused security team, you will collaborate closely with product and platform engineers to reduce exposure, improve security tooling, and build more resilient systems.

Accountabilities

• Plan and conduct red team, purple team, and application penetration testing activities aligned with the MITRE ATT&CK framework, focusing on relevant threats such as account takeover, API abuse, cloud credential misuse, and data exfiltration.

• Perform continuous security testing of TypeScript web applications and APIs, identifying vulnerabilities such as broken authorization, IDOR, injection, SSRF, prototype pollution, XSS, and insecure deserialization.

• Test newly released production features under clearly defined rules of engagement, using dedicated test accounts, rate limits, restricted access, and established stop conditions to protect real user data and system availability.

• Assess identity and access management systems, including OIDC/OAuth, SSO, session management, and authorization controls.

• Build and operate AI-driven offensive security workflows, including agents for reconnaissance, attack-path discovery, and continuous testing, with appropriate human oversight, scoped permissions, audit logging, and approval controls.

• Evaluate internal AI features and agents for prompt injection, unsafe tool usage, and potential data leakage.

• Manage external penetration testing and red team engagements, from defining scope and rules of engagement to validating findings and coordinating retesting.

• Develop and deliver remediation pull requests in TypeScript, Node.js, React, and Next.js codebases, following established testing, review, and release processes.

• Address vulnerable npm dependencies through safe upgrades, lockfile management, and careful handling of breaking changes.

• Create secure-by-default libraries and reusable engineering patterns for authorization, input validation, output encoding, and secrets management.

• Convert recurring vulnerability types into lasting safeguards, including regression tests, custom SAST or lint rules, and CI checks.

• Use AI coding assistants and agents to accelerate remediation while ensuring all changes receive human review.

• Conduct offensive security assessments of AWS infrastructure, including IAM privilege escalation, role chaining, cross-account trust abuse, exposed credentials, and metadata service exploitation.

• Assess cloud exposure risks involving public S3 buckets, API Gateway, Lambda, CloudFront, load balancers, internet-facing assets, EKS, and Kubernetes environments.

• Trace attack paths from application vulnerabilities to potential cloud infrastructure impact and provide platform teams with clear reproduction steps and remediation guidance.

• Help maintain and improve application security tooling, including SAST, DAST, and SCA, reducing false positives and ensuring genuine vulnerabilities reach the right owners.

• Triage and validate bug bounty submissions, reproduce reported issues, assess severity, and coordinate fixes and payouts.

• Improve AI-assisted vulnerability discovery and remediation tooling, validating automated findings and proposed fixes against manual testing.

• Collaborate with the broader product security team on priorities, findings, and security triage, while reporting on remediation timelines, vulnerabilities resolved, eliminated bug classes, and tooling effectiveness.

Requirements:

• At least 6 years of experience in security or software engineering, including 3 or more years of hands-on offensive security work such as penetration testing, red teaming, purple teaming, or application security testing.

• Practical offensive security experience in AWS environments, including IAM privilege escalation, cross-account access and role-trust abuse, SSRF-based metadata credential exposure, and misconfigured public services.

• Production software engineering experience with TypeScript and Node.js, including shipping code fixes through code review, automated testing, and CI/CD pipelines.

• Deep understanding of web and API security vulnerabilities, particularly the OWASP Top 10 and API Security Top 10, and the ability to implement effective code-level fixes.

• Experience conducting security testing against live production systems while following defined rules of engagement and operational safeguards.

• Working knowledge of SAST, DAST, and SCA tools, including configuring, tuning, and triaging their results.

• Hands-on experience using or developing agentic workflows for offensive security, with a practical understanding of their capabilities, limitations, and risks.

• Experience with Burp Suite or comparable web security testing proxies, as well as scripting custom security tools using TypeScript or Python.

• Strong understanding of OAuth 2.0, OIDC, session management, and authorization models.

• Excellent written communication skills, with the ability to produce actionable vulnerability reports and clear, reliable pull request descriptions.

• Experience with React/Next.js and Node.js frameworks such as NestJS or Express is an advantage.

• Familiarity with npm supply chain security, including SBOMs, provenance, lockfile management, and installation-script risks.

• Experience writing custom SAST rules, such as Semgrep-style rules, or security-focused ESLint rules is a plus.

• Previous experience managing third-party penetration testing or red team vendors from initial scoping through final retesting is beneficial.

• Familiarity with agent frameworks, MCP servers, tool-calling LLM APIs, OWASP Top 10 for LLM Applications, or MITRE ATLAS is an advantage.

• Exposure to adversary-emulation tools such as Atomic Red Team or Caldera, as well as command-and-control frameworks, is a plus.

• Experience operating or triaging a bug bounty program, working with platforms such as Bugcrowd, maintaining a personal bug bounty track record, or publishing CVEs is beneficial.

• Knowledge of cloud offensive security tools such as Pacu, CloudFox, or Prowler, and relevant AWS certifications such as AWS Security Specialty, is an advantage.

• Experience working in regulated environments and familiarity with frameworks or requirements such as HITRUST, SOC 2, and CCPA are desirable.

• Strong collaboration, analytical thinking, technical judgment, and a proactive approach to identifying and resolving security risks.

Benefits:

• Annual base salary ranging from $180,000 to $195,000 USD.

• Eligibility for an annual bonus program.

• Comprehensive employee benefits package.

• Remote work opportunity within the United States.

• Opportunity to contribute to a modern, engineering-driven security program with a strong focus on practical security improvements.

• Exposure to advanced offensive security practices, cloud infrastructure, application security, and AI-assisted security tooling.

• Opportunity to collaborate with product, platform, and security engineering professionals.

• Inclusive and collaborative working environment that values diverse perspectives and professional growth.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

Apply on jobs.lever.co About employer

More about this job

Skills

TypeScript
AWS
Penetration testing
MITRE ATT&CK
Identity and access management
Node.js
React
Next.js
Kubernetes
Reporting
Industrial software
Test automation
CI/CD
Python
Communication skills
Supply chain management
Collaboration
Analytical skills
Security threats

Report this job

Work requirements

Jobs in the United States