Senior Offensive Security Engineer

Required Qualifications 5-7+ years hands-on offensive security or penetration testing experience in web application, network, and cloud environments Demonstrated experience designing, leading, or maturing an offensive security program or methodology Experience scoping and overseeing internal and third-party offensive security engagements including rules of engagement, authorization, and scope management Expert command of offensive security tools including Burp Suite, Kali Linux toolset, and manual exploitation techniques including bypassing modern defenses Hands-on Active Directory and internal network exploitation experience (e.g., Kerberoasting, delegation abuse, lateral movement, privilege escalation) Working knowledge of cloud attack surfaces, including IAM misconfigurations, container security, and CI/CD pipeline attacks Experience using AI tools to accelerate offensive security workflows Deep understanding of OWASP Top 10, MITRE ATT&CK, CVSS and other severity scoring frameworks, and full attack-chain thinking Scripting and automation ability to build or extend custom tooling (e.g., Python, Bash, Powershell) Hands-on threat modeling experience (STRIDE, PASTA, or equivalent) Understanding of secure handling, storage, and reporting of sensitive engagement data and findings Excellent interpersonal, written, and verbal communication – able to explain and document security risk and remediation credibly to both technical and non-technical stakeholders Self-starter, team player, and enthusiasm for learning Applicants must be authorized to work in the United States without sponsorship. We are unable to provide sponsorship now or in the future for this position. Preferred Qualifications Bachelor’s degree in Computer Science, Software Engineering, Information Security, or a related field — or equivalent hands-on experience. OSCP, OSWE, OSEP, or equivalent red-team oriented certification Cloud security certification (AWS, Azure, GCP) Experience with C2 frameworks or interest in growing adversary emulation capabilities Familiarity with SIEM/EDR or detection engineering from a defender’s perspective Programming experience beyond scripting for exploit development or evasion tooling (C/C++, JavaScript, Go, Python) Working knowledge of SAST, DAST, SCA, and vulnerability management tooling Experience building or maintaining offensive security testing playbooks Familiarity with compliance frameworks and compliance-driven testing requirements (SOC 2, ISO 27001, etc.) Track record of mentoring team members Certain states and localities require employers to post a reasonable estimate of the salary range. A reasonable estimate of the current base pay range for this position is $116,000 to $145,000 annually. Actual salary will be based on a variety of factors, including shift, location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that are not included in the base pay. The well-being of WWT employees is essential. When it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees: Health and Wellbeing: Health (Medical & Prescription), Dental, and Vision Care, Onsite Health Centers (MO & IL), Employee Assistance Program, Wellness program Financial Benefits : Competitive Pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Flexible Spending Accounts, Tuition Reimbursement Paid Time Off: PTO & Holidays, Parental Leave, Medical Leave, Military Leave, Bereavement, Day of Caring Additional Perks: Family Planning Benefits, Nursing Mothers Benefits, Voluntary Legal, Voluntary Supplemental Accident/Illness/Hospital, Voluntary ID Theft, Pet Insurance, Employee Discount Program Note: This is not an all-encompassing list and should not be used as a complete description of the plan’s benefits. For more information, see our US Benefits Website We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication. Our goal is to cultivate a culture of belonging that encourages innovation, collaboration, and respect for all team members, ensuring that WWT remains a great place to work for all! If you require accessibility accommodation(s) or adjustment during any stage of the hiring process, please let your WWT Recruiter know. The recruiter will work with you to understand your needs and help ensure an accessible experience throughout the interview process. World Wide Technology is an Equal Opportunity Employer. If you have any questions or concerns about this posting, please email [email protected] . #LI-AM4 #LI-REMOTE We are not able to offer visa sponsorship, 1099 status, or work with C2C for this role . World Wide Technology (WWT) strives to make a new world happen. WWT's work benefits clients and partners as much as it does its people and community across the globe. Founded in 1990, WWT brings together strategy, deep technical expertise and world-class partnerships to help public and private sector organizations design, build and scale intelligent AI, digital, cybersecurity, cloud and infrastructure solutions. Through its Advanced Technology Center (ATC)—a collaborative ecosystem featuring state-of-the-art hardware and software—WWT enables clients and partners to conceptualize, test and validate innovative technology and then deploy solutions at scale using its global integration and distribution capabilities. With more than 14,000 team members and over 60 locations globally, WWT's culture—grounded in core values and leadership philosophies—has been recognized by Fortune® and Great Place to Work for its commitment to innovation, trust and creating a great place to work for all. WWT provides products and services to large enterprise, global service provider and public sector clients in up to 130 countries across six continents. Softchoice, a World Wide Technology company, supports commercial and SMB markets in the U.S. and Canada. Want to work with highly motivated individuals on high-performance teams? Join WWT today! What is the Internal WWT IT Team, and why join? The Internal WWT IT team is the backbone of our company’s technological infrastructure, ensuring seamless operations and continuous innovation. Our team is dedicated to managing and supporting the company’s technology infrastructure, ensuring the smooth operation of hardware, software, networks, and data systems, while providing top-notch technical support to employees. By joining the Internal WWT IT team, you will play a crucial role in maintaining the efficiency and security of our IT environment, enabling the company to achieve its strategic goals. The Internal IT team offers the opportunity to work in a dynamic and collaborative environment, where your contributions will have a direct impact on the company's success. If you are passionate about technology and eager to take on new challenges, we encourage you to apply and join our team. About the Role World Wide Technology’s Information Security organization is hiring a Senior Offensive Security Engineer to help build and mature an offensive security capability that identifies and validates real-world risk across the organization’s applications, networks, and cloud infrastructure. While this role sits within the Application Security team, your scope extends well beyond applications. You’ll plan and execute offensive engagements across organization-owned web applications and APIs, internal and external networks, and cloud environments, thinking like an adversary to find what automated tooling misses. Your focus is hands-on testing, retesting, and validation paired with clear, actionable reporting that helps both engineers and leadership understand and close real risk. You’ll partner closely with multiple teams to drive remediation, strengthen detection, and inform testing priorities across the business. This is a role for an offensive security practitioner who wants to build a program, not just execute within one. Key Responsibilities Testing Execution Plan and execute offensive tests across WWT owned web applications, APIs, internal and external networks, and cloud infrastructure Retest and validate remediated findings to confirm the fixes resolve the gaps Support scoping, oversight, and execution of internal and third-party engagements Reporting & Metrics Write clear, actionable reports for technical teams and leadership with reproducible steps and remediation guidance Track and report on trends across engagements, such as recurring finding types, time-to-remediate, and risk exposure, to inform leadership and program prioritization Collaboration & Compliance Collaborate across engineering, security, and GRC to drive remediation, validate findings, and inform testing prioritities Support compliance-driven testing requirements Contribute adversary-perspective input into threat modeling, architecture/design reviews, secure coding standards, and vulnerability management program Program & Tooling Maintain and evolve internal testing playbooks as the program matures Leverage AI tools to accelerate testing workflows, analysis, and reporting Build, adapt, or evaluate offensive security tooling and third-party vendors to support testing and reduce manual overhead People & Knowledge Mentor team members on offensive techniques, tools, and adversarial mindset Stay current on emerging attack techniques, CVEs, and adversary TTPs relevant to WWT’s technology stack