Senior Security Engineer, Threat & Offensive Security

1. About Our Client:
The organization operates in the regulated finance industry, focusing on mortgage servicing. It addresses the challenge of outdated and inefficient legacy systems by building and operating its own mortgage servicing business managing over $110 billion in loans. This approach enables the development of software tailored for regulated industries, achieving significant improvements in operational margins and customer experience. The company's platform, ValonOS, is designed to structure and automate processes for the AI era, initially transforming mortgage servicing with plans to extend to other regulated sectors.
2. About the Opportunity:
The Senior Security Engineer, Threat & Offensive Security plays a critical role in enhancing the organization's security posture by leading offensive security and threat operations. This position focuses on proactively identifying system vulnerabilities and scaling security testing through AI and automation. The role contributes to safeguarding sensitive financial data and supports secure, scalable capabilities across the company's infrastructure, directly impacting the trust and security of customer assets.
3. Responsibilities:
Conduct security testing and penetration tests on applications, infrastructure, and networks to identify vulnerabilities
Manage and implement security testing tools and frameworks simulating real-world attacks
Design and implement AI-enabled workflows to scale security testing and threat operations
Manage and operationalize threat intelligence to anticipate and mitigate emerging threats
Partner with external pentesting firms for independent security reviews
Perform security reviews of new systems, features, architectures, and third-party integrations with actionable recommendations
Collaborate with Engineering, IT, and Product teams to remediate vulnerabilities and enhance security controls
Develop and refine playbooks, procedures, and standards for offensive security, threat monitoring, and incident response
Monitor security alerts, analyze data, and respond to security events
Support operational security activities including reviews, monitoring, vendor security, remediation, awareness, and compliance
4. Requirements:
Minimum of 5 years in security engineering, penetration testing, threat intelligence, or related roles
Bachelor's degree in Computer Science, Information Security, Technology, or related field
Experience with security testing tools such as Burp Suite, Metasploit, Nmap, or Cobalt Strike
Proficiency in applying AI and automation to security testing and threat response
Strong understanding of manual and automated testing techniques
Knowledge of attack techniques, exploitation methods, and frameworks like MITRE ATT&CK
Experience with SIEM, EDR, and detection/monitoring platforms
Familiarity with cloud security in environments like GCP and AWS
Ability to work independently and lead complex security investigations
Strong communication and collaboration skills to convey technical risks
Applied knowledge of industry security standards such as OWASP, NIST, CIS, SOC 2, or ISO 27001
Experience in startup environments is advantageous
5. Pay Range and Compensation Package:
The pay range and compensation package for this role will be determined based on the candidate’s experience, skills, and other relevant factors.
Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.
Note:
RemoteHunter is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.

Work arrangement
Yes