> Markdown version of [/jobs/ext/4674926-offensive-security-engineer](https://www.wearedevelopers.com/jobs/ext/4674926-offensive-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Offensive Security Engineer

- **Company:** CYBERSECURITY ASSOCIATION, INC.
- **Location:** Redwood City, CA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), JavaScript (Programming Language), Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Authentication Protocols, Microsoft Azure, Burp Suite, C Sharp (Programming Language), Cloud Computing, Code Review, Cyber Security, Continuous Integration, DevOps, Emulators, Python (Programming Language), Kerberos (Protocol), Machine Learning, Nmap, OAuth, Open Web Application Security, Windows PowerShell, Openid Connect, Comptia Pentest+ CE, Cloud Services, Security Assertion Markup Language (SAML), Session Management, Software Engineering, TypeScript, Web Applications, Scripting, Large Language Models, Software Security, Mitre Att&ck, GWAPT, Kubernetes, Bug Reporting, Information Technology, Metasploit, Purple Team (Cyber Security), Programming Languages
- **Published:** November 11, 2026
- **Apply:** https://startup.jobs/senior-offensive-security-engineer-delinea-10729394

## About the Role

· Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related technical field, or equivalent work experience.

· Minimum 3+ years of demonstrated, hands-on experience with internal and external web application, API, and network penetration testing, inc luding writing formal penetration test reports that document test details, vulnerabilities, and risks.

· Understanding of penetration testing methodology and frameworks (MITRE ATT&CK, OWASP, PTES), including the OWASP Top 10 and OWASP API Security Top 10.

· Hands-on experience with industry-standard offensive tooling, such as Burp Suite, Nmap, Metasploit, BloodHound, and Impacket.

· Experience testing identity and authentication mechanisms, including Active Directory, Entra ID, Kerberos, OAuth 2.0, OpenID Connect, and SAML.

· Proficiency in at least one scripting or programming language, such as Python, Go, or PowerShell, for tooling, automation, and exploit development.

· Ability to read and review source code in common languages, such as C#, Java, or JavaScript/TypeScript, to identify security vulnerabilities.

· Experience with Azure and AWS cloud-based infrastructure.

· Understanding of the Secure Software Development Lifecycle (SSDLC).

· Skill in illustrating and explaining security vulnerabilities, including proof-of-concept demonstrations, to audiences with minimal expertise in security.

· Ability to manage multiple engagements concurrently and meet deadlines with minimal supervision.

We'd Love to See:

· One or more of the following certifications: ARTE, BSCP, CARTS, CRTL, CRTO, CRTP, eCPPT, eWPT, GPEN, GWAPT, OSCP, OSEP, OSWE, Pentest+, PNPT.

· Experience with command-and-control frameworks, such as Cobalt Strike, Sliver, or Mythic, and adversary emulation.

· Experience testing containerized and cloud-native environments, including Kubernetes, infrastructure-as-code, and CI/CD pipeline security.

· Experience testing identity and access management, privileged access management, or secrets management products.

· Experience both using AI and LLM-based agents and tooling in testing methodologies and testing AI and LLM-based features and agents, including prompt injection and the OWASP Top 10 for LLM Applications.

· Published CVEs, bug bounty participation, CTF competition, or other public security research contributions.

· Experience working with high-security environments subject to regulations such as FedRAMP or ITAR.

· Excellent analytical and problem-solving skills with a keen attention to detail.

## Description

Delinea's Cybersecurity organization is seeking a Senior Offensive Security Engineer to mature Delinea's in-house Offensive Security program. The ideal candidate will be highly collaborative, working alongside Product Development, DevOps, IT, and SecOps teams to shape the future of Penetration Testing and Red Teaming at Delinea and continually test the security of our products and the enterprise. The Senior Offensive Security Engineer will embrace the opportunity to work across diverse platforms with a variety of tools and will play a key role as we continually improve our capabilities over time. They'll work with an established team of talented and dedicated teammates to achieve our security objectives.

This is a challenging and impactful role with the opportunity to work with both internal and external stakeholders. The candidate must be able to balance the right level of security with business objectives, communicate clearly with technical as well as non-technical audiences, and work to creatively solve complex problems.

This role reports to the Sr. Manager, Offensive Security, is based in the United States, and is fully remote.

What You'll Do:

· Lead the build out of red and purple team operations, emulating real-world adversary TTPs to test the security controls and detection and response capabilities protecting Delinea's enterprise and
products, under the direction of the Sr. Manager, Offensive Security.

· Lead internal and external network and infrastructure penetration tests across Delinea's enterprise and product environments, including Azure and AWS.

· Identify and exploit attack paths in identity infrastructure, including Active Directory, Entra ID, Kerberos, and credential and secrets exposure.

· Perform source code review in support of testing engagements, leveraging findings to execute targeted attacks.

· Create or reproduce and demonstrate proof-of-concept exploits for findings and externally reported vulnerabilities.

· Plan and execute penetration testing engagements from beginning to end, including scoping, rules of engagement, testing, documentation, reporting, and remediation validation.

· As needed, perform manual and automated security testing of Delinea's web applications, APIs, desktop and agent-based clients, and cloud services, with a focus on authentication, authorization, session management, and privileged access workflows.

· Write clear, well-supported penetration test reports, including reproduction steps, risk ratings, business impact, and actionable remediation guidance.

· Partner with Product Development, DevOps, and IT teams to explain findings, support root cause analysis, and validate remediation.

· Develop and maintain custom tools, scripts, and automation to improve testing efficiency and coverage.

· Contribute to the team's testing methodologies, playbooks, and testing environments, including the use of frontier AI models in the evaluation of product sources and attack paths.

· Stay current on emerging vulnerabilities, exploitation techniques, and attacker tradecraft, and share knowledge with the team and the broader engineering organization.

· Communicate effectively with stakeholders at all levels, translating technical findings into actionable insights and recommendations for both technical and non-technical audiences.