Security Engineer II

About the Role:

We are looking for a Security Engineer specializing in Penetration Testing to help strengthen the security posture of our applications, infrastructure, and cloud environments. In this role, you will conduct penetration testing and security assessments, identify vulnerabilities, validate remediation efforts, and partner closely with engineering teams to improve security across the organization.

This role is ideal for someone passionate about penetration testing, offensive security, secure design and continuous improvement.

You Will:

• Perform penetration tests against:Web applications, APIs, Mobile applications, Cloud environments (AWS) and networks

• Identify, validate, and document security vulnerabilities with clear reproduction steps and remediation guidance.

• Collaborate with development and product teams to prioritize and remediate findings.

• Develop and maintain penetration testing methodologies, tooling, and automation.

• Perform red team style exercises and simulate real-world attack scenarios.

• Validate remediation activities through retesting.

• Research emerging threats, vulnerabilities, and offensive security techniques.

• Participate in incident response investigations when needed.

• Contribute to security awareness and training initiatives.

You Have:

• 3+ years of experience in Security with 2+ years in penetration testing or offensive security.

• Bachelor’s degree in Computer Science, Information Security, or related discipline.

• Strong understanding of:

  • Web app, API and Mobile app security concepts

  • Authentication and authorization mechanisms

  • Network security fundamentals

• Experience with penetration testing tools such as: Burp Suite, DAST and SAST tools

• Familiarity with any of the scripting or programming languages.

• Strong report writing and communication skills.

• Ability to clearly explain technical risks to engineering and business stakeholders.

• Familiarity with secure code review practices