Exposure Validation / Offensive Security Engineer

Join #Ensiteam!



We are a company focused on custom software development and have been in the market for over 22 years. At Ensitech, we are dedicated to finding highly specialized talent to work with large companies in the United States, Europe, and Canada.

Each one of our collaborators works with different teams and colleagues around the world, in the design and commercialization of software. We look forward to having you as part of our team in the role of Exposure Validation / Offensive Security Engineer, providing targeted offensive security validation within an AI-enabled cybersecurity service. This role focuses on confirming whether identified vulnerabilities represent real, exploitable exposure, and validating that remediation activities have effectively addressed the underlying issue, complementing automated security findings with hands-on technical validation.

Key Responsibilities

• Perform targeted security validation activities and conduct penetration testing as required.


• Validate whether identified vulnerabilities can be exploited, providing technical confirmation of security exposure.


• Conduct follow-up testing after remediation to confirm that vulnerabilities have been effectively addressed.


• Collaborate with Cloud Security / Exposure Engineers and Security Operations resources on escalated cases requiring offensive security expertise.


• Provide technical findings and validation results to support security remediation decisions.


• Support delivery of offensive security capabilities across multiple customers within a shared or fractional model, contributing to the evolution of the service as it grows toward dedicated resources and specialized pods.

Required Skills & Experience

• Experience in Offensive Security, Penetration Testing, or Security Validation.


• Hands-on experience conducting penetration testing and validating whether vulnerabilities are exploitable.


• Experience performing security testing after remediation to verify fixes hold.


• Strong understanding of vulnerability validation and remediation verification.


• Ability to collaborate with defensive security, cloud security, and security operations teams.


• Ability to work across multiple customer environments, supporting a shared or fractional delivery model.


• Advanced English proficiency, required for communication with international customer teams.

Nice to Have

• Certifications such as OSCP, OSCE, CEH, or GPEN.


• Experience with common offensive security tooling (e.g., Burp Suite, Metasploit, Cobalt Strike, or similar).


• Scripting or automation experience to support repeatable validation workflows.

What do we offer?

✅ Competitive salary and benefits.

✅ International and innovation-driven environment.

✅ Opportunity to work across multiple customer environments within an AI-enabled cybersecurity service.