ZipRecruiter

Log In

2

Offensive Security Engineer Remote Jobs in Virginia

Ad Hoc

PKI / IAM Security Engineer

Mclean, VA · Remote

PKI / IAM Security Engineer Job number: 879 This is a remote position. Ad Hoc is a technology company that empowers organizations to deliver scalable, impactful digital services. Using modern, agile ...

Endyna

Penetration Testing - SME

Mclean, VA · Remote

Remote / Hybrid / Travel as Required Security Requirement: Must be eligible to obtain and maintain ... Social engineering assessments * Container security testing * Internal network assessments

Maximus

Junior Security Engineer

VA · On-site +1

General information Job Posting Title Junior Security Engineer Date Wednesday, June 3, 2026 City Remote Country United States Working time Full-time Description & Requirements Maximus is a trusted ...

AAC

Endpoint Security Engineer

Vienna, VA · Remote

Oversee mobile security controls including device encryption, lost/stolen device workflows, and remote wipe/lock actions. Conduct security reviews for OS updates, CVEs, and platform changes. Work ...

Altus Consulting Corp

Penetration Tester

Herndon, VA · On-site +1

OSCP (Offensive Security Certified Professional) * CPTS (Certified Penetration Testing Specialist) * GPEN (GIAC Penetration Tester) * GXPN (GIAC Exploit Programmer) * CRTO (Certified Red Team ...

next page

Showing results 1-20

All JobsOffensive Security Engineer Remote JobsOffensive Security Engineer Remote Jobs in Virginia

Offensive Security Engineer Remote information

What is the difference between Offensive Security Engineer Remote vs Penetration Tester?

AspectOffensive Security Engineer RemotePenetration Tester
CertificationsOSCP, OSWE, CEHOSCP, CEH, GPEN
Work EnvironmentRemote, collaborative security teamsOften client-site or remote assessments
Industry UsageSecurity teams, cybersecurity firmsConsulting firms, security assessments
Search & Comparison IntentUnderstanding roles, skills, and remote opportunitiesJob scope, certifications, and remote work options

Offensive Security Engineer Remote and Penetration Tester roles share overlapping skills and certifications like OSCP and CEH. However, Offensive Security Engineers typically work within security teams on ongoing security infrastructure, often remotely, focusing on offensive security strategies. Penetration Testers usually perform specific security assessments, sometimes on-site, and may have a broader consulting focus. Both roles are vital in cybersecurity but differ in scope and work environment.

What are the key skills and qualifications needed to thrive as an Offensive Security Engineer (Remote), and why are they important?

To thrive as an Offensive Security Engineer (Remote), you need strong expertise in penetration testing, vulnerability assessment, and cybersecurity principles, often supported by a degree in computer science or a related field. Familiarity with tools like Metasploit, Burp Suite, and Kali Linux, as well as certifications such as OSCP or CEH, is typically required. Attention to detail, problem-solving skills, and effective written communication are critical soft skills for success in this role. These abilities are essential for identifying vulnerabilities, reporting findings clearly, and helping organizations strengthen their security posture against evolving threats.

What are some common challenges faced by remote Offensive Security Engineers, and how can they be addressed?

Remote Offensive Security Engineers often face challenges such as coordinating effectively with geographically dispersed teams, maintaining secure access to sensitive systems, and staying updated on rapidly evolving threat landscapes. Overcoming these hurdles typically involves strong communication skills, leveraging secure collaboration tools, and establishing regular check-ins with colleagues. Additionally, continuous learning through online resources and industry forums is vital to remain effective and proactive in identifying and addressing security vulnerabilities.

What does an Offensive Security Engineer do, especially when working remotely?

An Offensive Security Engineer is responsible for proactively identifying and mitigating security vulnerabilities in an organization’s systems, networks, and applications. Working remotely, they perform penetration testing, vulnerability assessments, and simulated cyberattacks to discover weaknesses before malicious actors can exploit them. They also provide detailed reports and recommendations to help organizations improve their overall security posture. Remote Offensive Security Engineers use a variety of tools and collaborate with other security professionals to ensure effective communication and secure operations across distributed environments.
What are the most commonly searched types of Offensive Security Engineer jobs in Virginia? The most popular types of Offensive Security Engineer jobs in Virginia are:
What are popular job titles related to Offensive Security Engineer Remote jobs in Virginia? For Offensive Security Engineer Remote jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Offensive Security Engineer Remote jobs in Virginia look for? The top searched job categories for Offensive Security Engineer Remote jobs in Virginia are:
What cities in Virginia are hiring for Offensive Security Engineer Remote jobs? Cities in Virginia with the most Offensive Security Engineer Remote job openings:
Offensive Security Engineer Remote jobs near you
Infographic showing various Offensive Security Engineer Remote job openings in Virginia as of June 2026, with employment types broken down into 87% Full Time, 4% Part Time, and 9% Contract. Highlights an 100% Remote job distribution.
Cyber Security Framework Engineer - Remote

Cyber Security Framework Engineer - Remote

micro1 AI

Virginia Beach, VA • Remote

$50 - $90/hr

Part-time

Posted 5 days ago

Job description

Role Title: Red Team Lead (Offensive Cybersecurity)


Role Type: Contractor


Location: Remote


micro1 is engaging Red Team Leads (Offensive Cybersecurity) to contribute expertise to a customer's critical cybersecurity project. In this role, you'll apply your expertise to help train next-generation AI systems. Your work will shape how models learn, reason, and perform through high-quality, real-world input. No prior experience in AI is required — your domain knowledge is what matters.


Scope of Work

  1. Develop comprehensive taxonomies for cyber-capability tasks and attack stages relevant to modern threat landscapes.
  2. Design and validate evaluation frameworks for offensive security, focusing on real-world scenarios involving exploit chains, malware, cloud/appsec, and social engineering.
  3. Create safe and effective proxy tasks to simulate advanced attack vectors while maintaining strict boundaries and ethical controls.
  4. Formulate robust scoring rubrics to assess attack sophistication, coverage, and impact across diverse domains.
  5. Review, critique, and enhance benchmarks for red team operations to ensure alignment with evolving security risks and best practices.
  6. Produce clear, well-documented methodologies and technical write-ups, communicating complex security concepts to both technical and non-technical audiences.
  7. Collaborate asynchronously with project stakeholders to iterate on frameworks and incorporate feedback into deliverables.


Preferred Qualifications

  1. 5+ years of hands-on experience in offensive cybersecurity, red teaming, exploit development, or vulnerability research (8–20 years preferred for senior contributors).
  2. Track record as a principal security engineer, exploit developer, cloud red-team lead, malware reverse-engineer, or security researcher specializing in attack chains or social engineering.
  3. Deep expertise in cyber attack methodologies, exploit chains, and cloud/application security assessments.
  4. Strong background in malware analysis, reverse engineering, and/or social engineering tactics and defenses.
  5. Demonstrated ability to produce clear, actionable written and verbal communication for a variety of audiences.
  6. Advanced degree, relevant professional security certifications, or equivalent operational experience highly valued.
  7. Experience building benchmarking or evaluation frameworks in cybersecurity is a plus.

Apply