Chief Security Engineer

We are seeking a Chief Security Engineer for a developer-minded offensive security leader who can automate exploit chains across network and web targets at scale. You will script and orchestrate safe, production-aware validation using threat intelligence, threat modeling, and continuous security validation platforms. Responsibilities Chain vulnerabilities to amplify impact, for example combining low-severity information disclosure with SSRF to reach Remote Code Execution Create custom exploits and automate sophisticated multi-stage authentication flows Implement and scale continuous, automated security validation tools to enable ongoing vulnerability management Use OSI model expertise and core network protocols to evaluate infrastructure security posture Detect and validate web application weaknesses, including OWASP Top 10 issues and API flaws such as IDOR Build automated exploit scripts that validate vulnerabilities safely without crashing live network infrastructure or corrupting production databases Conduct threat modeling to forecast attack paths and help prioritize remediation Apply cyber threat intelligence to guide exploit development and validation approaches Requirements Proven track record with 5+ years in security engineering or offensive security roles Expertise in cyber threat intelligence, threat modeling, and vulnerability management Hands-on proficiency in Python to script and automate exploit chains Deep understanding of OWASP Top 10 vulnerabilities and common web application security flaws Solid background configuring and scaling automated security validation frameworks such as Pentera, Cymulate, Picus, or custom Pentest Robots architectures Strong knowledge of the OSI model and key network protocols, including DNS, BGP, and TCP/IP Demonstrated ability to engineer exploit scripts that safely validate vulnerabilities in production environments without disruption English proficiency at B2 level (Upper-Intermediate) or higher Nice to have Willingness to use Bash and Go for scripting and automation work Familiarity with Multi-Factor Authentication and programmatic handling of TOTP Working knowledge of OAuth protocols for automating authentication flows