Senior Security Engineer

Remote • Posted 1 hour ago • Updated 1 hour ago
Full Time
Remote
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • Network
  • Authentication
  • Web Applications
  • Network Design
  • Database
  • Management
  • Security Engineering
  • Penetration Testing
  • Python
  • Writing
  • Threat Analysis
  • Threat Modeling
  • Vulnerability Management
  • OWASP
  • API
  • OSI Model
  • Network Protocols
  • DNS
  • Dragon NaturallySpeaking
  • Border Gateway Protocol
  • TCP/IP
  • English
  • Bash
  • Scripting
  • OAuth
  • Multi-factor Authentication

Summary

We are seeking a Senior Security Engineer who blends a developer's mindset with pentesting expertise, able to orchestrate, script, and chain network and web application exploits to operate autonomously. Responsibilities Chain vulnerabilities together to produce advanced exploitation outcomes, such as combining low-severity information disclosure with SSRF to achieve Remote Code Execution Develop custom exploits and automate complex, multi-stage authentication scripts Set up and scale continuous, automated security validation tools and frameworks Use deep understanding of the OSI model and core network protocols to identify and resolve infrastructure vulnerabilities Evaluate and fix web application vulnerabilities, including OWASP Top 10 issues and API flaws such as IDOR Build automated exploit scripts that safely confirm vulnerabilities without disrupting live network infrastructure or damaging production databases Perform threat modeling to anticipate and mitigate possible attack vectors Oversee vulnerability identification, prioritization, and remediation across systems Use cyber threat intelligence to guide security validation strategies and exploit development Requirements 3+ years of experience in security engineering, penetration testing, or a related field Strong expertise in exploit chaining and logic, with a demonstrated ability to sequence vulnerabilities for advanced exploitation Proficient in Python for writing custom exploits and automation scripts Solid knowledge of cyber threat intelligence, threat modeling, and vulnerability management practices Familiar with OWASP Top 10 vulnerabilities and API security issues like IDOR Experience configuring automated security validation tools and frameworks Good understanding of the OSI model and key network protocols, including DNS, BGP, and TCP/IP English proficiency at a B2+ level Nice to have Experience with Bash and Go for scripting and automation Familiarity with OAuth and Multi-Factor Authentication implementation and exploitation methods
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10330481
  • Position Id: dbc819ea21e0883e6bf364393df8c10f
  • Posted 1 hour ago
Create job alert
Never miss an opportunity! Create an alert based on the job you applied for.