Senior Security Engineer

We are seeking a Senior Security Engineer who is not just a pentester but a developer at heart, capable of orchestrating, scripting, and chaining network and web application exploits so they run autonomously and at scale. Responsibilities Sequence vulnerabilities together to escalate impact, such as pairing low-severity information disclosure with SSRF to achieve Remote Code Execution Develop custom exploits and automate complex multi-stage authentication flows Configure and scale continuous, automated security validation tools to support ongoing vulnerability management Apply knowledge of the OSI model and core network protocols to assess infrastructure security Identify and validate web application vulnerabilities, including OWASP Top 10 issues and API flaws like IDOR Engineer automated exploit scripts that safely validate vulnerabilities without crashing live network infrastructure or corrupting production databases Perform threat modeling to anticipate attack paths and prioritize remediation efforts Leverage cyber threat intelligence to inform exploit development and validation strategies Requirements 3+ years of experience in security engineering or offensive security roles Expertise in cyber threat intelligence, threat modeling, and vulnerability management Proficiency in Python for scripting and automating exploit chains Knowledge of OWASP Top 10 vulnerabilities and web application security flaws Background in configuring and scaling automated security validation frameworks such as Pentera, Cymulate, Picus, or custom Pentest Robots architectures Understanding of the OSI model and core network protocols, including DNS, BGP, and TCP/IP Showcase of experience engineering exploit scripts that safely validate vulnerabilities in production environments without causing disruption English proficiency at B2 level or higher Nice to have Flexibility to use Bash and Go for scripting and automation tasks Familiarity with Multi-Factor Authentication mechanisms and programmatic handling of TOTP Competency in OAuth protocols for automating authentication flows