> Markdown version of [/jobs/ext/4122318-offensive-security-engineer](https://www.wearedevelopers.com/jobs/ext/4122318-offensive-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Offensive Security Engineer

- **Company:** Motion Recruitment Partners LLC.
- **Location:** Chicago, IL, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $145,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Bash Shell, Burp Suite, Cloud Computing, Cloud Computing Security, Linux, Information Systems Security Architecture Professional, Python (Programming Language), Wireless Security, Nmap, Open Web Application Security, PCI Data Security Standards, Windows PowerShell, Red Team (Cyber Security), Software Engineering, Web Applications, Scripting, Google Cloud, Software Security, Mitre Att&ck, Cyber Threat Analysis, GWAPT, Metasploit, Cybercrime, Nessus, Vulnerability Analysis
- **Published:** October 9, 2026
- **Apply:** https://www.dice.com/job-detail/059dcaf9-0285-4f6e-a061-673ace436501

## About the Role

This position offers the opportunity to work closely with infrastructure, cloud, application development, and security teams to strengthen the organization's security posture. The ideal candidate combines strong technical expertise with the ability to clearly communicate findings and remediation recommendations to both technical and business stakeholders.
This is a hybrid position requiring three days per week in the Chicago office. Required Skills & Experience

 * CISSP (Certified Information Systems Security Professional) certification
 * OSCP (Offensive Security Certified Professional) certification
 * 4+ years of experience in offensive security, penetration testing, or security engineering
 * Strong experience conducting network, web application, cloud, and infrastructure penetration testing
 * Experience performing vulnerability assessments and risk analysis
 * Knowledge of common attack frameworks, including MITRE ATT&CK and OWASP Top 10
 * Proficiency with penetration testing and security assessment tools such as Burp Suite, Nmap, Metasploit, Nessus, BloodHound, Cobalt Strike, or similar
 * Experience identifying, exploiting, and documenting security vulnerabilities
 * Understanding of Windows, Linux, Active Directory, networking, and cloud platforms
 * Scripting or automation experience using Python, PowerShell, Bash, or similar languages
 * Strong report-writing and communication skills

Desired Skills & Experience

 * Experience conducting red team engagements or adversary emulation exercises
 * Knowledge of cloud security assessments within AWS, Azure, or Google Cloud environments
 * Security certifications in addition to CISSP and OSCP, such as GPEN, CRTO, GWAPT, or CEH
 * Experience evaluating CI/CD pipelines and application security controls
 * Familiarity with threat intelligence and threat hunting methodologies
 * Experience supporting compliance frameworks such as NIST, ISO 27001, PCI-DSS, or SOC 2, Applicants must be currently authorized to work in the US on a full-time basis now and in the future.

## Description

What You Will Be Doing Daily Responsibilities

 * Conduct internal and external penetration testing across enterprise environments
 * Perform vulnerability assessments and validate remediation efforts
 * Execute web application, network, cloud, and wireless security testing
 * Simulate real-world attack scenarios to identify security weaknesses
 * Partner with engineering and infrastructure teams to prioritize remediation activities
 * Develop detailed reports outlining findings, business impact, and recommended corrective actions
 * Participate in red team exercises and security validation initiatives
 * Assist in improving offensive security methodologies, tooling, and testing standards
 * Stay current on emerging threats, attacker techniques, and industry best practices

Daily Breakdown

 * 80% Hands-On Offensive Security Testing
 * 20% Reporting, Collaboration, and Security Consulting