Offensive Security Engineer

About the role

Our client is seeking an Offensive Security Engineer to help build and shape a brand-new offensive security program from the ground up. The ideal candidate will be hands-on, resourceful, and comfortable working directly with leadership to establish new processes and tooling. This is a hybrid position based in Dutchess County, NY.

Responsibilities

• Partner directly with leadership to design, build, and select tooling for a net-new offensive security program
• Conduct hands-on red teaming engagements to identify exploitable weaknesses across systems and networks
• Perform penetration testing against internal and external environments
• Execute threat emulation exercises to simulate real-world adversary tactics, techniques, and procedures
• Validate existing security controls and identify gaps in coverage
• Document findings, methodologies, and remediation recommendations for stakeholders
• Help evaluate and stand up offensive security tooling and processes as the program matures

Requirements

• At least 3 years of professional, hands-on experience in red teaming, penetration testing, or threat emulation
• Strong foundation in IT prior to moving into security preferred
• Practical, applied experience with control validation, not just conceptual knowledge
• Non-traditional backgrounds welcome, including military experience; degree requirement flexible for candidates with real, demonstrated experience
• Ability to work independently and help shape a program without existing infrastructure or precedent
• Solid understanding of common attack frameworks and methodologies (e.g., MITRE ATT&CK)