Senior Security Engineer

Senior Security Engineer Responsibilities Chain vulnerabilities together to produce advanced exploitation outcomes, such as combining low-severity information disclosure with SSRF to achieve Remote Code Execution Develop custom exploits and automate complex, multi-stage authentication scripts Set up and scale continuous, automated security validation tools and frameworks Use deep understanding of the OSI model and core network protocols to identify and resolve infrastructure vulnerabilities Evaluate and fix web application vulnerabilities, including OWASP Top 10 issues and API flaws such as IDOR Build automated exploit scripts that safely confirm vulnerabilities without disrupting live network infrastructure or damaging production databases Perform threat modeling to anticipate and mitigate possible attack vectors Oversee vulnerability identification, prioritization, and remediation across systems Use cyber threat intelligence to guide security validation strategies and exploit development Requirements 3+ years of experience in security engineering, penetration testing, or a related field Strong expertise in exploit chaining and logic, with a demonstrated ability to sequence vulnerabilities for advanced exploitation Proficient in Python for writing custom exploits and automation scripts Solid knowledge of cyber threat intelligence, threat modeling, and vulnerability management practices Familiar with OWASP Top 10 vulnerabilities and API security issues like IDOR Experience configuring automated security validation tools and frameworks Good understanding of the OSI model and key network protocols, including DNS, BGP, and TCP/IP English proficiency at a B2+ level Nice to have Experience with Bash and Go for scripting and automation Familiarity with OAuth and Multi-Factor Authentication implementation and exploitation methods