Secures software and cloud systems by reviewing code, modeling threats, automating security controls, and running attack simulations, while partnering with Engineering to prioritize and close vulnerabilities.
Staff Offensive Security Engineer
📜 Description
- Design and execute complex adversary simulations targeting cloud infrastructure and mobile applications.
- Conduct deep-dive vulnerability research to identify critical vulnerabilities.
- Collaborate with DevOps and Engineering to build automated security guardrails.
- Support incident response efforts by validating alert coverage through purple team exercises.
- Mentor senior and mid-level engineers to foster a security-minded development culture.
🛠️ Requirements
- Expert-level Offensive Skills: 8+ years of experience in offensive security, red teaming, or penetration testing, with a proven track record of uncovering critical vulnerabilities in complex environments.
- Cloud Native Expertise: Deep understanding of AWS security architecture, including IAM bypass techniques, container escapes (Kubernetes), and serverless security.
- Application Security Depth: Experience with manual code review (Node.js, Python, or Go) and bypass techniques for modern web and mobile security controls.
- Automation Mindset: Ability to script in Python, Bash, or Go to automate exploitation chains or integrate security testing into CI/CD pipelines.
- Strategic Communication: The ability to translate complex technical risks into business impact for executive stakeholders while remaining a trusted peer to software engineers.
- Relevant Certifications (Optional but valued): OSCP/OSCE, GXPN, or equivalent demonstration of deep technical skill.
- An Ethical Hacker at Heart: You are curious, persistent, and think outside the box to find ways around traditional security controls.
- A Collaborative Partner: You believe that "breaking things" is only half the job; the real value is in helping the team build them back stronger.
✨ Benefits
- Medical
- Dental
- Vision
- Paid life insurance
- Disability benefits
- Traditional 401k with company match
- Unlimited PTO
- Paid company holidays and pop-up bonus holidays
- Professional development stipend
- Mental health resources
Full job description
Greenlight is a family technology company on a mission to help families raise financially smart kids and navigate life together. Its suite of products — including the Greenlight app, debit card, Safe Family GPS trackers, and Family Hub — brings together financial tools, safety features, and everyday family management in one connected experience. Designed for busy families who want convenience without compromise, Greenlight continues to innovate alongside the evolving needs of modern life. Today, more than 6.5 million family members trust Greenlight to stay in sync.
At Greenlight, we're here to make the day-to-day easier and futures brighter, so families can spend less time managing life, and more time living it. That's why we get out of bed every morning.
Your day-to-day:
What you’ll bring to the team:
Not sure this one’s for you? Don’t count yourself out. Show us what you’ve got and we’ll reach out if there’s a great fit.
Work perks at Greenlight:
Similar jobs
Search more Cybersecurity Engineer jobsThe Security Architect designs and oversees security across cloud, product, and enterprise systems, combining blockchain and application security expertise to strengthen controls, detection, incident response, and secure development.
Executes day-to-day information security across corporate IT, platform, and product environments, maintaining ISO 27001 certification and advancing application security, vulnerability management, incident response, and customer compliance.
Own and strengthen the unclassified environment’s cybersecurity posture by implementing NIST SP 800-171 and CMMC Level 2 controls, conducting self-assessments, maintaining audit evidence, and vetting tools and vendors.
As a Senior Security Engineer, you will own endpoint detection and cloud security, lead incident response, and establish security policies to protect Kin's data and systems.
