1

Director Offensive Security Engineer Jobs (NOW HIRING)

About the role We are looking for a senior-level Offensive Security Engineer to serve as a high-impact "adversary-in-residence" for Replit's cloud-native platform. At Replit, security isn't just ...

As an Offensive Security Engineer at CoreWeave, you will lead efforts to identify and mitigate security risks across internal and external systems. You'll perform penetration testing, conduct threat ...

Senior Offensive Security Engineer

OR · On-site +1

$114K - $156K/yr

Are you an experienced Senior Offensive Security Engineer that wants to work with cutting-edge cybersecurity technologies and contribute to enhancing our overall security posture? At Ivanti, we work ...

Senior Offensive Security Engineer

$117K - $160K/yr

Are you an experienced Senior Offensive Security Engineer that wants to work with cutting-edge cybersecurity technologies and contribute to enhancing our overall security posture? At Ivanti, we work ...

... an offensive security engineering mindset to join us as a Senior Offensive Security Engineer ... direct rapid containment, threat eradication, and system recovery. * Provide a crucial feedback ...

New

... and offensive security techniques Design and solve security-focused technical problems used to ... engineering, DFIR, malware analysis, threat intelligence, or similar) Some coding experience ...

... and offensive security techniques Design and solve security-focused technical problems used to ... engineering, DFIR, malware analysis, threat intelligence, or similar) Some coding experience ...

... and offensive security techniques Design and solve security-focused technical problems used to ... engineering, DFIR, malware analysis, threat intelligence, or similar) Some coding experience ...

next page

Showing results 1-20

Director Offensive Security Engineer information

See salary details

$61.5K

$152.8K

$205.5K

How much do director offensive security engineer jobs pay per year?

As of Jun 6, 2026, the average yearly pay for director offensive security engineer in the United States is $152,773.00, according to ZipRecruiter salary data. Most workers in this role earn between $143,000.00 and $158,500.00 per year, depending on experience, location, and employer.

What is the difference between Director Offensive Security Engineer vs Security Architect?

AspectDirector Offensive Security EngineerSecurity Architect
CertificationsOSCP, CISSP, CEHCISSP, SABSA, TOGAF
Work EnvironmentLeading offensive security teams, penetration testing, red teamingDesigning security frameworks, architecture, and policies
Employer & Industry UsageTech companies, cybersecurity firms, government agenciesOrganizations seeking secure infrastructure, enterprise IT

The main difference is that the Director Offensive Security Engineer focuses on offensive security operations like penetration testing and red teaming, while the Security Architect designs overall security frameworks and infrastructure. Both roles require certifications like CISSP, but their responsibilities and focus areas differ significantly.

More about Director Offensive Security Engineer jobs
What cities are hiring for Director Offensive Security Engineer jobs? Cities with the most Director Offensive Security Engineer job openings:
What are the most commonly searched types of Offensive Security Engineer jobs? The most popular types of Offensive Security Engineer jobs are:
What states have the most Director Offensive Security Engineer jobs? States with the most job openings for Director Offensive Security Engineer jobs include:
What job categories do people searching Director Offensive Security Engineer jobs look for? The top searched job categories for Director Offensive Security Engineer jobs are:
Offensive Security Engineer

Offensive Security Engineer

Replit

Foster City, CA • On-site

$188K - $313K/yr

Full-time

Medical, Dental, Vision, Life, Retirement

Posted 27 days ago


Job description

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.
About the role
We are looking for a senior-level Offensive Security Engineer to serve as a high-impact "adversary-in-residence" for Replit's cloud-native platform. At Replit, security isn't just about perimeter defense; it's about the integrity of the code that powers millions of environments.
In this role, you will lead advanced "whitebox" penetration testing engagements-diving deep into our source code to identify systemic weaknesses, logic flaws, and architectural gaps. You will simulate sophisticated adversary tactics across our web applications, APIs, and containerized infrastructure, ensuring that our AI-integrated development environment remains the most secure place for the world's software to live.
What You'll Do
  • Lead Whitebox Penetration Testing: Execute end-to-end testing with full access to source code. You will perform manual code-level inspections to uncover complex logic flaws and authorization bypasses that automated tools miss.
  • Simulate Adversarial Attacks: Conduct Red and Purple team engagements across our cloud-native stack (K8s, Docker), simulating how a sophisticated actor might move from a code-level exploit to infrastructure-wide impact.
  • Secure AI-Enabled Systems: Perform offensive testing on LLM-backed applications and agentic AI workflows, focusing on prompt injection, data leakage, and abuse of AI-driven components.
  • Vulnerability Research & Chaining: Identify, exploit, and demonstrate realistic business risk by chaining vulnerabilities-from the application layer down through our internal trust boundaries.
  • Build Offensive Tooling: Contribute to internal security frameworks and build AI-assisted testing tools to automate the discovery of common bug classes while maintaining deep manual testing depth.
  • Partner with Engineering: Work closely with product teams and security architects to explain root causes, influence design guardrails, and triage high-priority findings from our Bug Bounty (HackerOne) program.

Required Skills & Experience
  • Experience: 7+ years of hands-on experience in penetration testing, offensive security, or vulnerability research.
  • Code Fluency: You are a practitioner of whitebox testing. You can navigate large codebases and have a deep understanding of modern application architectures and secure coding pitfalls.
  • Cloud-Native Context: You are comfortable in a cloud-native environment. While your focus is the code, you understand how it interacts with Kubernetes, Docker, and hybrid cloud infrastructure.
  • Engineering Skills: Strong proficiency in Go, Python, or TypeScript. You should be capable of writing custom scripts, payloads, and proof-of-concept exploits.
  • Adversarial Mindset: You enjoy the "hunt" and have a proven track record of manual exploitation beyond automated scanners.
  • Communicator: You can translate a complex code-level exploit into a clear narrative that helps engineering teams understand risk and prioritize fixes.
Bonus Qualifications
  • Public recognition on platforms like HackerOne or Bugcrowd.
  • Experience building or extending AI-based security testing tools.
  • Background in incident response or detection engineering from the defensive side.
  • Published CVEs or security research in the cloud-native or AI space.

This is a full-time role that can be held from our Foster City, CA office. The role has an in-office requirement of Monday, Wednesday, and Friday.
Full-Time Employee Benefits Include:
Competitive Salary & Equity
401(k) Program with a 4% match (US Only)
Health, Dental, Vision and Life Insurance
Short Term and Long Term Disability
Paid Parental, Medical, Caregiver Leave
Flexible Time Off (FTO) + Holidays
Commuter Benefits (In-Office Only)
Monthly Wellness Stipend
Autonomous Work Environment
In Office Set-Up Reimbursement (In-Office Only)
Quarterly Team Gatherings
In Office Amenities (In-Office Only)
Want to learn more about what we are up to?
  • Meet the Replit Agent
  • Replit: Make an app for that
  • Replit Blog
  • Amjad TED Talk

Interviewing + Culture at Replit
  • Operating Principles
  • Reasons not to work at Replit

To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.