Jobs in the United States

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added 7 mins ago
EG
Automated Test Engineer
Eliassen Group
Cheyenne, WY
- $40 to $50 USD / hour
Our client seeks an Automated Test Engineer to support Hivemind by monitoring and maintaining large volumes of automated tests, troubleshooting failures, and driving bug resolution across…
Added 11 mins ago
J
Senior Security Engineer, Offensive Security & Remediation
Jobgether
Remote, United States
- $180,000 to $195,000 USD / year
…and next steps. Our partner is looking for a Senior Security Engineer, Offensive Security & Remediation based in the United States…
Added 37 mins ago
JB
Cloud Software Engineer 3 (TS/SCI Clearance with Full Scope Polygraph Required)
J&T Business Consulting
Annapolis, MD
- $199,000 to $238,000 USD / year
Seeking a senior Cloud Software Engineer 3 to design, develop, and optimize complex, large-scale Big Data cloud architectures and distributed systems in Annapolis Junction, MD.
Added 40 mins ago
QA/Test Automation Developer Intern - Tucson, AZ
IBM
TUCSON, AZ
As a QA/Test Engineer within IBM Infrastructure, you will ensure the quality, reliability, performance, and security of enterprise software solutions. You will work closely with developers,…
Added 40 mins ago
AE
Sr Software Engineer I
American Express
Phoenix, AZ
- $123,000 to $215,250 USD / year
Design, develop, and deliver scalable, high-quality software solutions across the full stack, leveraging Java and Python for enterprise-grade platforms and services
Added 40 mins ago
EG
Automated Test Engineer
Eliassen Group
Phoenix, AZ
- $40 to $50 USD / hour
Our client seeks an Automated Test Engineer to support Hivemind by monitoring and maintaining large volumes of automated tests, troubleshooting failures, and driving bug resolution across…
Added 52 mins ago
EG
Automated Test Engineer
Eliassen Group
Concord, NH
- $40 to $50 USD / hour
Our client seeks an Automated Test Engineer to support Hivemind by monitoring and maintaining large volumes of automated tests, troubleshooting failures, and driving bug resolution across…
Added 54 mins ago
AD
Senior Engineer, Systems Integration Eng
Analog Devices, Inc.
Wilmington, MA
- $123,065 to $165,615 USD / year
Job Title: Senior Engineer, Systems Integration Engineering
Added 1 hour ago
Senior Software Engineer
SZNS Solutions LLC
Remote, United States
We are seeking a talented Senior Software Engineer to join our growing team. As a Senior Engineer, you will lead the development of cutting-edge solutions in cloud computing, web3, and…
Added 1 hour ago
S
Forward Deployed Engineer
Syntiant
Redwood City, CA
- $195,000 to $225,000 USD / year
Syntiant Corp., a leader in the high-growth AI software and semiconductor solutions space, is looking for an experienced and talented Forward Deployed Engineer.
Added 1 hour ago
Lead QA Engineer - AI & Test Automation (Workforce Management)
Symmetrio
Remote, United States
Symmetrio is recruiting a Lead QA Engineer – AI & Test Automation to support a large-scale enterprise workforce transformation initiative centered around a greenfield implementation of…
Added 1 hour ago
S
Integration Engineer - Healthcare
Symmetrio
Remote, United States
- $140,000 to $160,000 USD / year
Symmetrio is recruiting an Integration Engineer for our customer, a growing healthcare technology organization focused on solutions that support radiation oncology and clinical care teams.
Added 1 hour ago
IG
Top Secret Applied AI/ML Engineer
Insight Global
Fort Meade, MD
- $75 to $115 USD / hour
Insight Global is seeking a Top Secret Applied AI/ML Engineer to support the design, development, and deployment of next-generation artificial intelligence capabilities within a growing…
Added 1 hour ago
Software Engineer - AI Focus (Center for Technology in Education) - #Staff
Johns Hopkins University
Baltimore, MD
Create and document complex test scenarios using the appropriate testing tools to validate and verify application functionality.
Added 1 hour ago
EG
Automated Test Engineer
Eliassen Group
Annapolis, MD
- $40 to $50 USD / hour
Our client seeks an Automated Test Engineer to support Hivemind by monitoring and maintaining large volumes of automated tests, troubleshooting failures, and driving bug resolution across…
Added 1 hour ago
EG
Automated Test Engineer
Eliassen Group
Providence, RI
- $40 to $50 USD / hour
Our client seeks an Automated Test Engineer to support Hivemind by monitoring and maintaining large volumes of automated tests, troubleshooting failures, and driving bug resolution across…
Added 1 hour ago
Developer Relations Engineer
Jobgether
Remote, United States
This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Developer Relations Engineer based in United States.
Added 1 hour ago
EG
Automated Test Engineer
Eliassen Group
Augusta, ME
- $40 to $50 USD / hour
Our client seeks an Automated Test Engineer to support Hivemind by monitoring and maintaining large volumes of automated tests, troubleshooting failures, and driving bug resolution across…
Added 1 hour ago
M
Senior Software Engineer
Microsoft
WA · Redmond, WA · Redmond
- $119,800 to $261,000 USD / year
We are looking for a talented Senior Software Engineer to join us in pushing the boundaries of technology for the Copilot experience. In this role, you will work on building highly scalable…
Added 1 hour ago
J
Software Engineer, Project, AI Platforms
Jobgether
Remote, United States
- $139,680 to $176,600 USD / year
…applications and next steps. Our partner is looking for a Software Engineer, Project, AI Platforms based in the United…
Added 1 hour ago
EG
Automated Test Engineer
Eliassen Group
Honolulu, HI
- $40 to $50 USD / hour
Our client seeks an Automated Test Engineer to support Hivemind by monitoring and maintaining large volumes of automated tests, troubleshooting failures, and driving bug resolution across…
Added 2 hours ago
DRÄXLMAIER Tunisia PFE Book Jemmal
D-Career
Jemmal, TN
 Test and deploy the system on a pilot machine.
Added 2 hours ago
DevOps Engineer
Majestic Labs
Los Altos, CA
As a Senior DevOps Engineer reporting to the DevOps Manager, you will own the infrastructure our engineers use to build, test and run Majestic Labs’ AI servers. The environment is hybrid:…
Added 2 hours ago
J
Data Integration Engineer
Jobgether
Remote, United States
- $73,500 to $105,600 USD / year
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Data Integration Engineer based in the United States.
Added 3 hours ago
EG
Automated Test Engineer
Eliassen Group
Bismarck, ND
- $40 to $50 USD / hour
Our client seeks an Automated Test Engineer to support Hivemind by monitoring and maintaining large volumes of automated tests, troubleshooting failures, and driving bug resolution across…

Jobgether

Senior Security Engineer, Offensive Security & Remediation

Remote, United States

$180,000 to $195,000 USD / year

Apply on jobs.lever.co About employer

Applications open in a new tab.

Job details

Pay: $180,000 to $195,000 USD / year
Posting language: English
Posted: Nov 12, 2026

Original job description

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior Security Engineer, Offensive Security & Remediation based in the United States .

The Senior Security Engineer will play a key role in strengthening application, infrastructure, and product security through continuous offensive testing and hands-on remediation. This position is heavily focused on identifying vulnerabilities across TypeScript applications, APIs, and AWS environments, while translating findings into practical, lasting security improvements. You will lead penetration testing and red team activities, simulate realistic attack scenarios, and assess emerging risks associated with AI-powered applications and tools. Alongside offensive work, you will contribute directly to secure engineering by developing fixes, automated safeguards, and reusable security patterns. Working within a small, engineering-focused security team, you will collaborate closely with product and platform engineers to reduce exposure, improve security tooling, and build more resilient systems.

Accountabilities

• Plan and conduct red team, purple team, and application penetration testing activities aligned with the MITRE ATT&CK framework, focusing on relevant threats such as account takeover, API abuse, cloud credential misuse, and data exfiltration.

• Perform continuous security testing of TypeScript web applications and APIs, identifying vulnerabilities such as broken authorization, IDOR, injection, SSRF, prototype pollution, XSS, and insecure deserialization.

• Test newly released production features under clearly defined rules of engagement, using dedicated test accounts, rate limits, restricted access, and established stop conditions to protect real user data and system availability.

• Assess identity and access management systems, including OIDC/OAuth, SSO, session management, and authorization controls.

• Build and operate AI-driven offensive security workflows, including agents for reconnaissance, attack-path discovery, and continuous testing, with appropriate human oversight, scoped permissions, audit logging, and approval controls.

• Evaluate internal AI features and agents for prompt injection, unsafe tool usage, and potential data leakage.

• Manage external penetration testing and red team engagements, from defining scope and rules of engagement to validating findings and coordinating retesting.

• Develop and deliver remediation pull requests in TypeScript, Node.js, React, and Next.js codebases, following established testing, review, and release processes.

• Address vulnerable npm dependencies through safe upgrades, lockfile management, and careful handling of breaking changes.

• Create secure-by-default libraries and reusable engineering patterns for authorization, input validation, output encoding, and secrets management.

• Convert recurring vulnerability types into lasting safeguards, including regression tests, custom SAST or lint rules, and CI checks.

• Use AI coding assistants and agents to accelerate remediation while ensuring all changes receive human review.

• Conduct offensive security assessments of AWS infrastructure, including IAM privilege escalation, role chaining, cross-account trust abuse, exposed credentials, and metadata service exploitation.

• Assess cloud exposure risks involving public S3 buckets, API Gateway, Lambda, CloudFront, load balancers, internet-facing assets, EKS, and Kubernetes environments.

• Trace attack paths from application vulnerabilities to potential cloud infrastructure impact and provide platform teams with clear reproduction steps and remediation guidance.

• Help maintain and improve application security tooling, including SAST, DAST, and SCA, reducing false positives and ensuring genuine vulnerabilities reach the right owners.

• Triage and validate bug bounty submissions, reproduce reported issues, assess severity, and coordinate fixes and payouts.

• Improve AI-assisted vulnerability discovery and remediation tooling, validating automated findings and proposed fixes against manual testing.

• Collaborate with the broader product security team on priorities, findings, and security triage, while reporting on remediation timelines, vulnerabilities resolved, eliminated bug classes, and tooling effectiveness.

Requirements:

• At least 6 years of experience in security or software engineering, including 3 or more years of hands-on offensive security work such as penetration testing, red teaming, purple teaming, or application security testing.

• Practical offensive security experience in AWS environments, including IAM privilege escalation, cross-account access and role-trust abuse, SSRF-based metadata credential exposure, and misconfigured public services.

• Production software engineering experience with TypeScript and Node.js, including shipping code fixes through code review, automated testing, and CI/CD pipelines.

• Deep understanding of web and API security vulnerabilities, particularly the OWASP Top 10 and API Security Top 10, and the ability to implement effective code-level fixes.

• Experience conducting security testing against live production systems while following defined rules of engagement and operational safeguards.

• Working knowledge of SAST, DAST, and SCA tools, including configuring, tuning, and triaging their results.

• Hands-on experience using or developing agentic workflows for offensive security, with a practical understanding of their capabilities, limitations, and risks.

• Experience with Burp Suite or comparable web security testing proxies, as well as scripting custom security tools using TypeScript or Python.

• Strong understanding of OAuth 2.0, OIDC, session management, and authorization models.

• Excellent written communication skills, with the ability to produce actionable vulnerability reports and clear, reliable pull request descriptions.

• Experience with React/Next.js and Node.js frameworks such as NestJS or Express is an advantage.

• Familiarity with npm supply chain security, including SBOMs, provenance, lockfile management, and installation-script risks.

• Experience writing custom SAST rules, such as Semgrep-style rules, or security-focused ESLint rules is a plus.

• Previous experience managing third-party penetration testing or red team vendors from initial scoping through final retesting is beneficial.

• Familiarity with agent frameworks, MCP servers, tool-calling LLM APIs, OWASP Top 10 for LLM Applications, or MITRE ATLAS is an advantage.

• Exposure to adversary-emulation tools such as Atomic Red Team or Caldera, as well as command-and-control frameworks, is a plus.

• Experience operating or triaging a bug bounty program, working with platforms such as Bugcrowd, maintaining a personal bug bounty track record, or publishing CVEs is beneficial.

• Knowledge of cloud offensive security tools such as Pacu, CloudFox, or Prowler, and relevant AWS certifications such as AWS Security Specialty, is an advantage.

• Experience working in regulated environments and familiarity with frameworks or requirements such as HITRUST, SOC 2, and CCPA are desirable.

• Strong collaboration, analytical thinking, technical judgment, and a proactive approach to identifying and resolving security risks.

Benefits:

• Annual base salary ranging from $180,000 to $195,000 USD.

• Eligibility for an annual bonus program.

• Comprehensive employee benefits package.

• Remote work opportunity within the United States.

• Opportunity to contribute to a modern, engineering-driven security program with a strong focus on practical security improvements.

• Exposure to advanced offensive security practices, cloud infrastructure, application security, and AI-assisted security tooling.

• Opportunity to collaborate with product, platform, and security engineering professionals.

• Inclusive and collaborative working environment that values diverse perspectives and professional growth.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

Apply on jobs.lever.co About employer

More about this job

Skills

TypeScript
AWS
Penetration testing
MITRE ATT&CK
Identity and access management
Node.js
React
Next.js
Kubernetes
Reporting
Industrial software
Test automation
CI/CD
Python
Communication skills
Supply chain management
Collaboration
Analytical skills
Security threats

Report this job

Work requirements

Jobs in the United States