> Markdown version of [/jobs/ext/2704836-security-engineer-threat-offensive-security](https://www.wearedevelopers.com/jobs/ext/2704836-security-engineer-threat-offensive-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer, Threat & Offensive Security - **Company:** VALION SECURITY LLC - **Location:** New York, NY, United States (Remote available) - **Experience:** Expert - **Salary:** $180,000.0 - $230,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Data Analysis, Software System Penetration Testing, Automation of Tests, Burp Suite, Cloud Computing Security, Cyber Security, Intrusion Detection and Prevention, Nmap, Open Web Application Security, Red Team (Cyber Security), Security Information and Event Management, Cloud Platform System, Mitre Att&ck, Cyber Threat Analysis, Information Technology, Metasploit, Integration Frameworks, Vulnerability Analysis - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/senior-security-engineer-threat-offensive-security-valon-tech-9820041 ## About the Role * Proven experience in security engineering, red team, or threat management role, with a focus on penetration testing, security testing, threat intelligence, and/or incident response * Hands-on experience with security testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap, Cobalt Strike, or similar) * Demonstrated experience leveraging AI and automation to improve the efficiency and scalability of threat detection, testing, and response operations * Proficient in both manual and automated testing techniques, understanding when manual analysis is needed versus pure automated testing * Strong understanding of common attack techniques, exploitation methods, and MITRE ATT&CK or related * Experience with SIEM, EDR, and other detection/monitoring platforms * Experience with cloud security and environments (GCP, AWS) * Ability to work autonomously, lead projects, and navigate complex, ambiguous security investigations * Ability to foster strong relationships and partner with stakeholders to drive remediation and results * Excellent communication and collaboration skills, with the ability to explain technical findings and risk to both technical and non-technical stakeholders * Applied knowledge of industry security and testing frameworks (OWASP, NIST, MITRE ATT&CK, CIS, SOC 2/ISO 27001 concepts) * Experience or exposure to startup environments is a plus, * Minimum of 5 years in a security engineering, penetration testing, threat intelligence, or similar roles with relevant responsibilities and background * Bachelor's degree in Computer Science, Information Security, Technology, or a related field * Relevant security certifications (e.g., CISSP, CEH, OSCP, GPEN, GCIH or similar) * Knowledge of cloud environments * Experience with security testing, monitoring, and response technologies (threat intelligence platforms, vulnerability scanners, SIEM, EDR, or similar) ## Description We are seeking an experienced and skilled Senior Security Engineer, Threat & Offensive Security to join our growing team! As a key security member at Valon, you will help scale and strengthen our offensive security and threat operations, proactively identifying weaknesses in our systems, networks, and applications as the company continues to grow. This position requires a deep understanding of adversarial techniques, security testing methodologies, threat intelligence, and incident response, along with the ability to collaborate with cross-functional teams. Importantly, this role requires an AI and automation-first approach to security work, using modern tools to scale testing, threat management, and response. You will help ensure security is embedded across our environment and that we continue to safeguard our most critical assets and maintain the trust of our customers and stakeholders., * Drive and conduct security testing and penetration tests across applications, infrastructure, and networks to identify exploitable vulnerabilities * Manage and implement security testing tools and frameworks to simulate real-world attacks and validate the effectiveness of existing security controls * Design and implement AI-enabled workflows to scale security testing and threat related operations. * Manage and operationalize threat intelligence to anticipate emerging threats and adjust defenses proactively * Partner with external pentesting firms for periodic, independent reviews * Perform security reviews of new systems, features, architectures, and third-party integrations, providing actionable risk-based recommendations * Collaborate with Engineering, IT, Product and other teams to remediate identified vulnerabilities and strengthen security controls * Develop and refine playbooks, procedures, and standards for offensive security testing, threat monitoring, and incident response * Monitor and manage security alerts and incidents, analyze data, and respond to security events * Support operational activities including general security reviews, security monitoring, vendor security, issue remediation, security awareness, audit/compliance, and other processes ## Related Videos - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Automated Security for the Entire SDLC](https://www.wearedevelopers.com/videos/100323-automated-security-for-the-entire-sdlc) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)