Experience across both offensive security and security architecture domains Good to have: * Experience leading CRA, regulated product security, or compliance-driven cybersecurity assessments
Experience across both offensive security and security architecture domains Good to have: * Experience leading CRA, regulated product security, or compliance-driven cybersecurity assessments
Red Team Lead Engineer
Boston, MA ยท On-site
$120K - $202K/yr
Advanced proficiency in offensive security techniques and threatinformed testing methodologies. * Strong understanding of adversary behaviors and attack frameworks to guide scenario design. * Broad ...
Red Team Lead Engineer
Boston, MA ยท On-site
$120K - $202K/yr
Advanced proficiency in offensive security techniques and threatinformed testing methodologies. * Strong understanding of adversary behaviors and attack frameworks to guide scenario design. * Broad ...
Sr. AI Red Team Engineer
Cambridge, MA ยท Hybrid
$145K - $234K/yr
Here's WhatYou'llNeed (Basic Qualifications) * 4+ yearsincybersecurity with deep experience in red teaming, offensive security, or adversary simulation. * Proven ability to conduct end-to-end attack ...
Sr. AI Red Team Engineer
Cambridge, MA ยท Hybrid
$145K - $234K/yr
Here's WhatYou'llNeed (Basic Qualifications) * 4+ yearsincybersecurity with deep experience in red teaming, offensive security, or adversary simulation. * Proven ability to conduct end-to-end attack ...
Senior Application Security Engineer
Boston, MA ยท On-site
$124K - $170K/yr
Offensive security experience and a drive to automate it: red-teaming, or threat hunting against your own products. * Threat modeling experience on distributed systems and data platforms, and a ...
Senior Application Security Engineer
Boston, MA ยท On-site
$124K - $170K/yr
Offensive security experience and a drive to automate it: red-teaming, or threat hunting against your own products. * Threat modeling experience on distributed systems and data platforms, and a ...
Security Guardian -VP
Quincy, MA ยท On-site
$120K - $217K/yr
Bring strong technical depth across network security, product and platform security, data protection and cryptography, and offensive security techniques, using attacker-mindset analysis to ...
Security Guardian -VP
Quincy, MA ยท On-site
$120K - $217K/yr
Bring strong technical depth across network security, product and platform security, data protection and cryptography, and offensive security techniques, using attacker-mindset analysis to ...
Cybersecurity Engineer
Chelmsford, MA ยท On-site
This role sits at the intersection of threat intelligence, detection engineering, offensive security, and adversary emulation . You will research emerging vulnerabilities, exploits, malware ...
Quick apply
Cybersecurity Engineer
Chelmsford, MA ยท On-site
This role sits at the intersection of threat intelligence, detection engineering, offensive security, and adversary emulation . You will research emerging vulnerabilities, exploits, malware ...
Cybersecurity Engineer
Chelmsford, MA ยท On-site
This role sits at the intersection of threat intelligence, detection engineering, offensive security, and adversary emulation . You will research emerging vulnerabilities, exploits, malware ...
Cybersecurity Engineer
Chelmsford, MA ยท On-site
This role sits at the intersection of threat intelligence, detection engineering, offensive security, and adversary emulation . You will research emerging vulnerabilities, exploits, malware ...
Cybersecurity Engineer
Chelmsford, MA ยท On-site
This role sits at the intersection of threat intelligence, detection engineering, offensive security, and adversary emulation . You will research emerging vulnerabilities, exploits, malware ...
Cybersecurity Engineer
Chelmsford, MA ยท On-site
This role sits at the intersection of threat intelligence, detection engineering, offensive security, and adversary emulation . You will research emerging vulnerabilities, exploits, malware ...
Cybersecurity Engineer
Chelmsford, MA ยท On-site
This role sits at the intersection of threat intelligence, detection engineering, offensive security, and adversary emulation . You will research emerging vulnerabilities, exploits, malware ...
Cybersecurity Engineer
Chelmsford, MA ยท On-site
This role sits at the intersection of threat intelligence, detection engineering, offensive security, and adversary emulation . You will research emerging vulnerabilities, exploits, malware ...
Security Guardian -VP
Quincy, MA ยท On-site
$120K - $217K/yr
Bring strong technical depth across network security, product and platform security, data protection and cryptography, and offensive security techniques, using attacker-mindset analysis to ...
Security Guardian -VP
Quincy, MA ยท On-site
$120K - $217K/yr
Bring strong technical depth across network security, product and platform security, data protection and cryptography, and offensive security techniques, using attacker-mindset analysis to ...
Sr. AI Red Team Engineer
Cambridge, MA ยท On-site
$145K - $234K/yr
Here's What You'll Need (Basic Qualifications) * 4+ years in cybersecurity with deep experience in red teaming, offensive security, or adversary simulation. * Proven ability to conduct end-to-end ...
Sr. AI Red Team Engineer
Cambridge, MA ยท On-site
$145K - $234K/yr
Here's What You'll Need (Basic Qualifications) * 4+ years in cybersecurity with deep experience in red teaming, offensive security, or adversary simulation. * Proven ability to conduct end-to-end ...
Senior Application Security Engineer
Boston, MA ยท On-site
$124K - $170K/yr
Offensive security experience and a drive to automate it: red-teaming, or threat hunting against your own products. * Threat modeling experience on distributed systems and data platforms, and a ...
Senior Application Security Engineer
Boston, MA ยท On-site
$124K - $170K/yr
Offensive security experience and a drive to automate it: red-teaming, or threat hunting against your own products. * Threat modeling experience on distributed systems and data platforms, and a ...
Senior Security Automation Engineer
Wilmington, MA ยท On-site
$125K - $171K/yr
Contribute to penetration-testing and red-team efforts as our offensive security program grows. * Measure and report outcomes such as time saved, error reduction, throughput improvement, and risk ...
Senior Security Automation Engineer
Wilmington, MA ยท On-site
$125K - $171K/yr
Contribute to penetration-testing and red-team efforts as our offensive security program grows. * Measure and report outcomes such as time saved, error reduction, throughput improvement, and risk ...
Distinguished Cyber Software Engineer
Cambridge, MA ยท On-site
$100K - $275K/yr
Offensive Security Engineers are responsible for both identifying and defeating modern defensive security techniques in both hardware and software to deliver software that can withstand environmental ...
Distinguished Cyber Software Engineer
Cambridge, MA ยท On-site
$100K - $275K/yr
Offensive Security Engineers are responsible for both identifying and defeating modern defensive security techniques in both hardware and software to deliver software that can withstand environmental ...
Distinguished Cyber Software Engineer
Cambridge, MA ยท On-site
$100K - $275K/yr
Offensive Security Engineers are responsible for both identifying and defeating modern defensive security techniques in both hardware and software to deliver software that can withstand environmental ...
Distinguished Cyber Software Engineer
Cambridge, MA ยท On-site
$100K - $275K/yr
Offensive Security Engineers are responsible for both identifying and defeating modern defensive security techniques in both hardware and software to deliver software that can withstand environmental ...
Contribute to penetration-testing and red-team efforts as our offensive security program grows. * Measure and report outcomes such as time saved, error reduction, throughput improvement, and risk ...
Contribute to penetration-testing and red-team efforts as our offensive security program grows. * Measure and report outcomes such as time saved, error reduction, throughput improvement, and risk ...
Solutions Architect (Pentesting / Cyber)
Burlington, MA ยท On-site +1
$68.50 - $90.25/hr
This is a role that sits at the intersection of offensive security, customer impact, and product influence. Roles and Responsibilities: * Design deployment solutions for the Pentera platform in ...
Solutions Architect (Pentesting / Cyber)
Burlington, MA ยท On-site +1
$68.50 - $90.25/hr
This is a role that sits at the intersection of offensive security, customer impact, and product influence. Roles and Responsibilities: * Design deployment solutions for the Pentera platform in ...
Cybersecurity & Incident Response Managing Associate Attorney
Boston, MA ยท On-site
$260K - $365K/yr
Counsel security teams regarding emerging legal issues involving offensive security and dark web intelligence gathering. * Advise clients on cybersecurity readiness, governance, risk mitigation, and ...
Quick apply
Cybersecurity & Incident Response Managing Associate Attorney
Boston, MA ยท On-site
$260K - $365K/yr
Counsel security teams regarding emerging legal issues involving offensive security and dark web intelligence gathering. * Advise clients on cybersecurity readiness, governance, risk mitigation, and ...
Associate AI Security Resident
Boston, MA ยท On-site
Term (Fixed Term) Overview RAND's Center on AI, Security, and Technology (CAST), part of the Global ... Ability to think creatively about offensive and/or defensive techniques and strategies, beyond ...
Associate AI Security Resident
Boston, MA ยท On-site
Term (Fixed Term) Overview RAND's Center on AI, Security, and Technology (CAST), part of the Global ... Ability to think creatively about offensive and/or defensive techniques and strategies, beyond ...
Associate AI Security Resident
Boston, MA ยท On-site +1
Term (Fixed Term) Overview RAND's Center on AI, Security, and Technology (CAST), part of the Global ... Ability to think creatively about offensive and/or defensive techniques and strategies, beyond ...
Associate AI Security Resident
Boston, MA ยท On-site +1
Term (Fixed Term) Overview RAND's Center on AI, Security, and Technology (CAST), part of the Global ... Ability to think creatively about offensive and/or defensive techniques and strategies, beyond ...
Offensive Security information
See Boston, MA salary details
$61.9K - $74.7K
1% of jobs
$74.7K - $87.4K
4% of jobs
$87.4K - $100.1K
5% of jobs
$100.1K - $112.9K
9% of jobs
$119.9K is the 25th percentile. Wages below this are outliers.
$112.9K - $125.6K
11% of jobs
$125.6K - $138.4K
10% of jobs
The median wage is $143.3K / yr.
$138.4K - $151.1K
28% of jobs
$158.5K is the 75th percentile. Wages above this are outliers.
$151.1K - $163.8K
14% of jobs
$163.8K - $176.6K
11% of jobs
$176.6K - $189.3K
4% of jobs
$189.3K - $202.1K
4% of jobs
$61.9K
$144.4K
$202.1K
How much do offensive security jobs pay per year?
What is offensive security?
An Offensive Security job involves proactively identifying and exploiting security vulnerabilities in systems, networks, and applications to help organizations strengthen their defenses. Professionals in this field, such as ethical hackers and penetration testers, simulate real-world cyberattacks to find weaknesses before malicious actors can exploit them. They use various tools, techniques, and frameworks to assess security risks, provide recommendations, and improve overall cybersecurity posture. Offensive security experts often work for security firms, enterprises, or government agencies to ensure robust digital protection.
What does a typical day look like for someone working in offensive security?
A typical day in Offensive Security involves conducting penetration tests, vulnerability assessments, and red teaming exercises to identify and exploit potential weaknesses in systems and networks. You may spend time analyzing findings, preparing detailed reports, and collaborating with IT teams to discuss remediation strategies. The role often requires staying current with emerging threats and tools, as well as participating in team meetings to review attack simulations or incident scenarios. Regular communication with clients or internal stakeholders is also common to explain technical concepts in an accessible way. The dynamic nature of the work keeps each day interesting and fosters continuous learning and problem-solving.
What are the key skills and qualifications needed to thrive in offensive security, and why are they important?
To thrive as an Offensive Security professional, you need a deep understanding of networks, operating systems, penetration testing methodologies, and typically hold a degree in computer science or a related field. Familiarity with tools such as Metasploit, Burp Suite, Nmap, as well as certifications like OSCP or CEH, is often required. Strong analytical thinking, attention to detail, effective communication, and ethical judgment are essential soft skills. These abilities are crucial for identifying vulnerabilities, communicating risks, and helping organizations improve their security posture.
What are popular job titles related to Offensive Security jobs in Boston, MA?
For Offensive Security jobs in Boston, MA, the most frequently searched job titles are:
What job categories do people searching Offensive Security jobs in Boston, MA look for?
The top searched job categories for Offensive Security jobs in Boston, MA are:

Other
Posted 5 days ago
Job description
Role: Principal Product Security Architect & Engagement Lead
Work Location: Tewksbury, MA 01876 (100% Onsite)
Role Summary
Lead and govern the end-to-end product lifecycle cybersecurity assessment engagement for the customer product, including CRA-aligned security evaluation, architecture assessment, threat modeling, technical oversight, evidence traceability, and executive reporting. Serve as the primary customer interface and ensure all assessment activities are executed in compliance with export-control requirements.
Key Responsibilities
-
Lead overall engagement delivery, governance, and customer coordination
-
Conduct product security architecture assessments and threat modeling activities
-
Perform trust boundary analysis and review data flows across product components and external integrations
-
Oversee CRA-aligned assessment methodology, compliance traceability, and lifecycle security evaluation
-
Evaluate operational resilience, recovery considerations, and lifecycle security controls across deployed product environments
-
Review secure-by-design implementation and product security governance practices
-
Guide technical testing activities and validate risk prioritization and exploitability context
-
Review security findings and ensure consistency across technical and compliance outputs
-
Lead executive reporting, release readiness assessment, and remediation discussions
-
Ensure evidence collection and assessment outputs align to CRA requirements
-
Review lifecycle security considerations including secure decommissioning and data disposal practices
-
Enforce export-control compliant handling of personnel, systems, and data
-
Provide final quality assurance and assessment signoff oversight
Required Skills & Experience
Mandatory:
-
Strong experience in product cybersecurity and secure-by-design principles
-
Expertise in threat modelling, architecture review, and trust boundary analysis
-
Strong understanding of product lifecycle security and operational resilience concepts
-
Familiarity with secure SDLC, SBOM governance, and vulnerability management practices
-
Strong executive communication and stakeholder management capability
-
Experience across both offensive security and security architecture domains
Good to have:
-
Experience leading CRA, regulated product security, or compliance-driven cybersecurity assessments
-
Experience leading engagement in export-controlled environments
Preferred Certifications
-
CISSP, CSSLP, SABSA / TOGAF (preferred)
-
FedRAMP or regulated environment experience preferred
Years of Required Experience
-
7-10 years in product application security
-
5+ years in complex customer assessment and regulatory assessment engagements