ZipRecruiter

Log In

2

Offensive Security Engineer Remote Jobs in Massachusetts

Later

Senior Security Engineer

Boston, MA · On-site +1

$124K - $170K/yr

Senior Security Engineer Remote, United States About this position: We're looking for a Senior Security Engineer to strengthen Later's company-wide security posture through hands-on engineering ...

ALKU

Information Security Engineer

Andover, MA · On-site +1

$150K - $180K/yr

Review and advise on network changes, cloud connectivity, remote access design, and firewall rule ... engineering or network security is a strong differentiator * Hands-on experience with SIEM ...

Tripadvisor

Cloud Security Engineer II

Needham, MA · On-site +1

$60.75 - $81.25/hr

... Cloud Security Engineer II to build, automate, and scale security guardrails across our cloud ... Needham - MA or Remote - United States What You'll Do * Cloud Infrastructure Guardrails: Design ...

Tripadvisor

Cloud Security Engineer II

Needham, MA · On-site +1

$60.75 - $81.25/hr

... Cloud Security Engineer II to build, automate, and scale security guardrails across our cloud ... Needham - MA or Remote - United States What You'll Do * Cloud Infrastructure Guardrails: Design ...

MassMutual

Information Security Analyst

Springfield, MA · Remote

... fellow security analysts, engineers, and other IT security specialists throughout the firm ... Offensive Security, Security Platforms Support, Network Security, Endpoint Security and IAM teams ...

next page

Showing results 1-20

All JobsOffensive Security Engineer JobsOffensive Security Engineer Remote JobsOffensive Security Engineer Remote Jobs in Massachusetts

Offensive Security Engineer Remote information

What does an offensive security engineer do?

An Offensive Security Engineer is responsible for proactively identifying and mitigating security vulnerabilities in an organization’s systems, networks, and applications. Working remotely, they perform penetration testing, vulnerability assessments, and simulated cyberattacks to discover weaknesses before malicious actors can exploit them. They also provide detailed reports and recommendations to help organizations improve their overall security posture. Remote Offensive Security Engineers use a variety of tools and collaborate with other security professionals to ensure effective communication and secure operations across distributed environments.

What are the key skills and qualifications needed to thrive as an offensive security engineer?

To thrive as an Offensive Security Engineer (Remote), you need strong expertise in penetration testing, vulnerability assessment, and cybersecurity principles, often supported by a degree in computer science or a related field. Familiarity with tools like Metasploit, Burp Suite, and Kali Linux, as well as certifications such as OSCP or CEH, is typically required. Attention to detail, problem-solving skills, and effective written communication are critical soft skills for success in this role. These abilities are essential for identifying vulnerabilities, reporting findings clearly, and helping organizations strengthen their security posture against evolving threats.

What are some common challenges faced by remote offensive security engineers, and how can they be addressed?

Remote Offensive Security Engineers often face challenges such as coordinating effectively with geographically dispersed teams, maintaining secure access to sensitive systems, and staying updated on rapidly evolving threat landscapes. Overcoming these hurdles typically involves strong communication skills, leveraging secure collaboration tools, and establishing regular check-ins with colleagues. Additionally, continuous learning through online resources and industry forums is vital to remain effective and proactive in identifying and addressing security vulnerabilities.

What is the difference between Offensive Security Engineer Remote vs Penetration Tester?

AspectOffensive Security Engineer RemotePenetration Tester
CertificationsOSCP, OSWE, CEHOSCP, CEH, GPEN
Work EnvironmentRemote, collaborative security teamsOften client-site or remote assessments
Industry UsageSecurity teams, cybersecurity firmsConsulting firms, security assessments
Search & Comparison IntentUnderstanding roles, skills, and remote opportunitiesJob scope, certifications, and remote work options

Offensive Security Engineer Remote and Penetration Tester roles share overlapping skills and certifications like OSCP and CEH. However, Offensive Security Engineers typically work within security teams on ongoing security infrastructure, often remotely, focusing on offensive security strategies. Penetration Testers usually perform specific security assessments, sometimes on-site, and may have a broader consulting focus. Both roles are vital in cybersecurity but differ in scope and work environment.

What are popular job titles related to Offensive Security Engineer Remote jobs in Massachusetts?

For Offensive Security Engineer Remote jobs in Massachusetts, the most frequently searched job titles are:

What job categories do people searching Offensive Security Engineer Remote jobs in Massachusetts look for?

The top searched job categories for Offensive Security Engineer Remote jobs in Massachusetts are:

What cities in Massachusetts are hiring for Offensive Security Engineer Remote jobs?

Cities in Massachusetts with the most Offensive Security Engineer Remote job openings:

Offensive Security Engineer Remote jobs near you
Infographic showing various Offensive Security Engineer Remote job openings in Massachusetts as of September 2026, with employment types broken down into 100% Full Time. Highlights an 100% Remote job distribution.

Cyber Security Framework Engineer - Remote

Boston, MA • Remote

micro1 AI
Software Development • 11 - 50 employees
Learn more about micro1 AIexternal

$50 - $90/hr

Part-time

Re-posted 17 days ago

Job description

Role Title: Red Team Lead (Offensive Cybersecurity)


Role Type: Contractor


Location: Remote


micro1 is engaging Red Team Leads (Offensive Cybersecurity) to contribute expertise to a customer's critical cybersecurity project. In this role, you'll apply your expertise to help train next-generation AI systems. Your work will shape how models learn, reason, and perform through high-quality, real-world input. No prior experience in AI is required — your domain knowledge is what matters.


Scope of Work

  1. Develop comprehensive taxonomies for cyber-capability tasks and attack stages relevant to modern threat landscapes.
  2. Design and validate evaluation frameworks for offensive security, focusing on real-world scenarios involving exploit chains, malware, cloud/appsec, and social engineering.
  3. Create safe and effective proxy tasks to simulate advanced attack vectors while maintaining strict boundaries and ethical controls.
  4. Formulate robust scoring rubrics to assess attack sophistication, coverage, and impact across diverse domains.
  5. Review, critique, and enhance benchmarks for red team operations to ensure alignment with evolving security risks and best practices.
  6. Produce clear, well-documented methodologies and technical write-ups, communicating complex security concepts to both technical and non-technical audiences.
  7. Collaborate asynchronously with project stakeholders to iterate on frameworks and incorporate feedback into deliverables.


Preferred Qualifications

  1. 5+ years of hands-on experience in offensive cybersecurity, red teaming, exploit development, or vulnerability research (8–20 years preferred for senior contributors).
  2. Track record as a principal security engineer, exploit developer, cloud red-team lead, malware reverse-engineer, or security researcher specializing in attack chains or social engineering.
  3. Deep expertise in cyber attack methodologies, exploit chains, and cloud/application security assessments.
  4. Strong background in malware analysis, reverse engineering, and/or social engineering tactics and defenses.
  5. Demonstrated ability to produce clear, actionable written and verbal communication for a variety of audiences.
  6. Advanced degree, relevant professional security certifications, or equivalent operational experience highly valued.
  7. Experience building benchmarking or evaluation frameworks in cybersecurity is a plus.

Apply