Senior Offensive Security Engineer

About This RoleAI processing…

Key Responsibilities

• 1
  Independently manage complete red team exercises.
• 2
  Partner with Engineering, Product, IT, and other business functions to drive security improvement across the organization
• 3
  Research emerging attack vectors, vulnerabilities and techniques
• 4
  Utilize your offensive skills to identify weaknesses and build defenses against those who may point their attacks at Chime
• 5
  Develop custom payloads and exploits
• 6
  Emulate adversaries like cybercriminals and insider threats by attacking web applications, cloud platforms and supporting services(Kubernetes / Container Orchestration platforms etc.)
• 7
  Collaborate closely with detection engineers to build high fidelity alerting based on emerging attack vectors and tactics, techniques and procedures
• 8
  Participate in purple-team exercises to mature the security program

Requirements

• 4+ years of combined experience in either an offensive security, red teaming, or application security role.
• Experience in conducting surreptitious cloud based attacks
• Experience with developing custom tools and payloads which bypass defensive products, and remain undetected in a mature network environment
• Ability to perform unsupervised red team engagements and experience with performing adversarial simulation
• Ability to explain vulnerabilities and weaknesses to non-technical stakeholders
• (Nice to have) Relevant certifications: OSCP (Offensive Security Certified Professional), OSCE (Offensive Security Certified Expert) and OSEE (Offensive Security Exploitation Expert), Certified Red Team Operator (CRTO), GIAC Red Team Professional certification (GRTP)

Perks & Benefits