← All roles

Senior Penetration Tester (AWS)

Offchain Labs· Engineering
Apply on company site
RemoteFull-timePosted 11mo ago

About the role

Senior Security Engineer at Offchain who emulates adversaries to surface vulnerabilities, conducts hands-on penetration tests and red team exercises, and collaborates to strengthen detection, response, and compliance (SOC 2) across infrastructure and ecosystem tools.

Responsibilities

  • Conduct comprehensive code audits across a variety of internal applications and infrastructure.
  • Conduct comprehensive penetration tests across cloud environments (AWS), infrastructure, and backend applications.
  • Collaborate with detection engineering, threat intelligence, and incident response groups to review security controls, uncover coverage gaps, and enhance overall detection quality.
  • Build, maintain, and evolve custom offensive tools, scripts, and automation frameworks to increase assessment speed.
  • Offer offensive security expertise during incident investigations, including log analysis and root cause reviews.
  • Keep up with evolving threats, vulnerabilities, and attack methods; share research internally and engage with the wider security community.
  • Own offensive security projects from start to finish, mentor junior team members, and cultivate a culture of ongoing learning and knowledge exchange.

Qualifications

  • 5+ years of experience in offensive security, penetration testing, red teaming, or a closely related field.
  • Extensive experience with conducting code audits to identify and remediate security issues.
  • Experience with binary exploitation.
  • Mastery of AWS & specific attack techniques and configuration weaknesses.
  • Strong understanding of adversary tactics and frameworks like MITRE ATT&CK.
  • In-depth knowledge of web application security, including OWASP Top 10, ASVS, and common vulnerability categories.
  • Proficiency using offensive security tools such as Burp Suite, nuclei and similar frameworks.
  • Strong programming skills in Python, Go, or similar languages, with proven experience developing tools or automation.
  • Excellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations.
  • A natural ability to think like an attacker - creative, determined, and skilled at assessing risk across complex systems.

Skills

Required:Offensive securityCode auditsBinary exploitationAWS securityMITRE ATT&CKWeb security (OWASP/ASVS)Security toolingProgramming

Benefits

  • Remote-first global workforce + NY office
  • Professional reimbursement program (facilitates industry conference attendance, certifications, and more)
  • Medical, dental & vision coverage (US + some other countries)
  • 401k retirement plan + company match (US only)
  • Wellness stipend
  • Home office set up / ergonomic equipment program
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Offchain Labs

Scaling Ethereum Without Compromise

Offchain Labs is a company that is dedicated to building cutting-edge scaling solutions for Ethereum. Our mission is to enable developers, businesses, and individuals to fully experience Ethereum without compromises.

EthereumLayer 2Blockchain scalingRollup technologyConsensus clientWeb3 development
Company profileWebsite

More open roles at Offchain Labs