← All roles

Senior Security Engineer, Threat & Offensive Security

Valon· Technical Infrastructure
Apply on company site
Remote$180k - $230kFull-timePosted 1mo ago

About the role

Senior-level security engineering role focusing on offensive security and threat operations to scale and strengthen testing, threat intelligence, and incident response with an AI and automation-first approach.

Responsibilities

  • Drive and conduct security testing and penetration tests across applications, infrastructure, and networks to identify exploitable vulnerabilities
  • Manage and implement security testing tools and frameworks to simulate real-world attacks and validate the effectiveness of existing security controls
  • Design and implement AI-enabled workflows to scale security testing and threat related operations.
  • Manage and operationalize threat intelligence to anticipate emerging threats and adjust defenses proactively
  • Partner with external pentesting firms for periodic, independent reviews
  • Perform security reviews of new systems, features, architectures, and third-party integrations, providing actionable risk-based recommendations
  • Collaborate with Engineering, IT, Product and other teams to remediate identified vulnerabilities and strengthen security controls
  • Develop and refine playbooks, procedures, and standards for offensive security testing, threat monitoring, and incident response
  • Monitor and manage security alerts and incidents, analyze data, and respond to security events
  • Support operational activities including general security reviews, security monitoring, vendor security, issue remediation, security awareness, audit/compliance, and other processes

Qualifications

  • Proven experience in security engineering, red team, or threat management role, with a focus on penetration testing, security testing, threat intelligence, and/or incident response
  • Hands-on experience with security testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap, Cobalt Strike, or similar)
  • Demonstrated experience leveraging AI and automation to improve the efficiency and scalability of threat detection, testing, and response operations
  • Proficient in both manual and automated testing techniques, understanding when manual analysis is needed versus pure automated testing
  • Strong understanding of common attack techniques, exploitation methods, and MITRE ATT&CK or related
  • Experience with SIEM, EDR, and other detection/monitoring platforms
  • Experience with cloud security and environments (GCP, AWS)
  • Ability to work autonomously, lead projects, and navigate complex, ambiguous security investigations
  • Ability to foster strong relationships and partner with stakeholders to drive remediation and results
  • Excellent communication and collaboration skills, with the ability to explain technical findings and risk to both technical and non-technical stakeholders
  • Applied knowledge of industry security and testing frameworks (OWASP, NIST, MITRE ATT&CK, CIS, SOC 2/ISO 27001 concepts)
  • Experience or exposure to startup environments is a plus

Skills

Required:Security testing and penetration testingAI and automation for securityThreat intelligenceIncident responseSecurity frameworks

Benefits

  • Compensation: competitive salary with equity and 401(k) plan; base salary range reflects multiple levels and is determined by experience and interview performance
  • Health & well-being: comprehensive medical, dental, and vision benefits
  • Free Food: daily lunch and dinner for in-office team members
  • Commuter benefits: pre-tax deductions for public transit, rideshares, and parking
  • Grow together: orientation and ongoing learning & development opportunities including regular reviews with 360-degree feedback
  • Play together: quarterly budgets for team and company outings
  • Generous time off: flexible paid time off with no annual limit, sick days, and 11 company holidays
  • Baby bonding time: 12 weeks of fully paid leave for both birthing and non-birthing parents
Last updated Oct 22, 2026. Interested? Apply on the company site.

About Valon

The AI-native operating system for mortgage servicing. Building a better foundation for the American Dream.

Mortgage servicingAI-native operating systemRegulated financeRegulated workflowsPlatformValonOS
Company profileWebsite

More open roles at Valon