1

Weekend Offensive Security Engineer Jobs in California

As an Offensive Security Engineer, you will lead efforts to identify and mitigate security risks, perform penetration testing, and provide guidance on secure design practices. Responsibilities : โ€ข ...

About The Role As an Offensive Security Engineer within HP IQ's Product Security team, you will partner closely with engineering teams to identify, validate, and mitigate security risks across the ...

Senior Offensive Security Engineer

San Francisco, CA ยท On-site

$134K - $185K/yr

Senior Offensive Security Engineer As a Senior Offensive Security Engineer, you will lead penetration testing and adversarial simulation efforts targeting our applications, cloud infrastructure, and ...

As an Offensive Security Engineer, you will lead efforts to identify and mitigate security risks, perform penetration testing, and develop security tooling to enhance the company's overall security ...

Offensive Security Engineer

Foster City, CA ยท On-site

$188K - $313K/yr

About the role We are looking for a senior-level Offensive Security Engineer to serve as a high-impact "adversary-in-residence" for Replit's cloud-native platform. At Replit, security isn't just ...

Offensive Security Engineer

Sunnyvale, CA ยท On-site

$165K - $242K/yr

As an Offensive Security Engineer at CoreWeave, you will lead efforts to identify and mitigate security risks across internal and external systems. You'll perform penetration testing, conduct threat ...

Designing a flexible and distributed electrical grid The Role We are looking for a hands-on individual with an offensive security engineering mindset to join us as a Senior Offensive Security ...

next page

Showing results 1-20

Weekend Offensive Security Engineer information

What is the difference between Weekend Offensive Security Engineer vs Penetration Tester?

AspectWeekend Offensive Security EngineerPenetration Tester
CertificationsOSCP, CEH, GPENOSCP, CEH, GPEN
Work EnvironmentPart-time, project-based, often remoteFull-time, consulting or in-house roles
Industry UsageSecurity firms, tech companies, freelanceSecurity firms, consulting, internal security teams

The Weekend Offensive Security Engineer and Penetration Tester roles share similar certifications and skills, focusing on identifying vulnerabilities. However, the Weekend Offensive Security Engineer typically works part-time or on a flexible schedule, often remotely, while Penetration Testers usually hold full-time positions. Both roles are vital in cybersecurity, but the engineer role emphasizes a flexible, project-based approach, whereas Penetration Testers often work within organizations or consulting firms on scheduled assessments.

What are the most commonly searched types of Offensive Security Engineer jobs in California? The most popular types of Offensive Security Engineer jobs in California are:
What are popular job titles related to Weekend Offensive Security Engineer jobs in California? For Weekend Offensive Security Engineer jobs in California, the most frequently searched job titles are:
What job categories do people searching Weekend Offensive Security Engineer jobs in California look for? The top searched job categories for Weekend Offensive Security Engineer jobs in California are:
What cities in California are hiring for Weekend Offensive Security Engineer jobs? Cities in California with the most Weekend Offensive Security Engineer job openings:

Offensive Security Engineer (Remote)

Charles Schwab Inc.

San Francisco, CA โ€ข On-site, Remote

$148K - $185K/yr

Full-time

Posted 4 days ago


Job description

Your Opportunity
At Schwab, you're empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us "challenge the status quo" and transform the finance industry together.
We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).
Schwab Technology Services enables the future of how clients manage their money by providing innovative and reliable technology products and services as part of our ongoing commitment to democratize access to investing and financial planning.
The Offensive Security Engineer scopes, designs and executes controlled cybersecurity offensive operations, penetration tests and threat adversary emulation exercises to identify vulnerabilities and risks, evaluate the effectiveness of security controls and the incident response process. The Offensive Security Engineer documents any identified risks, translates technical findings into clear, actionable recommendations and works with stakeholders to identify appropriate mitigating controls to manage any outstanding risk. The Offensive Security Engineer works closely with counterparts in defensive teams to improve threat detection and response and engineering teams to mitigate risk before it's introduced into the environment.
  • Scope, develop and execute penetration tests, purple team assessments and red team exercises.
  • Design and develop tools, infrastructure and exploits in support of red team operations.
  • Research and implement assessments based on emerging threats, threat intelligence, and vulnerabilities.
  • Identify gaps in threat detection, Prevention and response.
  • Work collaboratively with counterparts in Cyber Defense roles to enhance the firms security posture.
  • Effectively communicate vulnerabilities, risks and technical findings to stakeholders and work with stakeholders to recommend and validate mitigating controls.

What you have
Required Qualifications
  • 5+ years of experience in offensive security, penetration testing or red team role.
  • Experience with common red team adversary emulation tooling and C2 frameworks.
  • Advanced knowledge of the tools, tactics, procedures and counter measures.
  • Experience researching emerging threats and TTP's, developing complementary assessments, and executing those assessments to understand and manage risk and develop appropriate counter measures.
  • Experience evaluating, reporting and communicating risk at both the technical level (ATT&CK/STRIDE/DREAD) and at an audience appropriate level with stakeholders across the firm.
  • Experience working with cross-discipline project teams to advance security within the firm.
  • In-depth experience with one or more of the following cybersecurity disciplines: Endpoint Penetration testing with a focus on bypassing modern EDR controls (across Windows, Mac and Linux), Exploit & Malware Development, Web Application Penetration Testing, Cloud Penetration Testing, AI Red Teaming, and Assessing digital assets and cryptocurrency solutions.

Preferred Qualifications
  • One or more of the following security certifications preferred: Offensive Security Certified Professional OSCP, GIAC Penetration Tester GPEN, GXPN Offensive Security Certified Professional or similar security certification(s).
  • BS in Computer Science or equivalent degree/experience desired.
  • Operational blue team experience.