HiringCafe
Join our community

23 offensive security engineer jobs at 17 companies in Gaithersburg, MD

4w
Save
Mark Applied
Hide
Senior Offensive Security Engineer - Pentester
Denver or Washington or Seattle or Charlotte or Jacksonville or Jersey City or Chicago
$160k-$205k/yr OnsiteFull Time
Bank of America
Bank of AmericaNYSE: BAC: Provides banking, investment, and financial risk management services.
5+ YOE5+ years offensive security experience, proficiency with pentesting tools, strong understanding of networks/OS/Active Directory, ability to code (Python/Java/C#), report vulnerabilities, mentor junior engineers.
Burp Suite, Metasploit, nmap, Python, Java, C#
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Offensive Security Engineer (Red Team)
California or Maryland or Virginia or Herndon
$149k-$224k/yr RemoteFull Time
Salesforce
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
Deep hands-on offensive security/red team experience executing complex engagements, manual exploitation and attack chaining, identity and cloud abuse, custom scripting/tooling, and strong communication with engineering and response teams.
Job PostingView all
2w
Save
Mark Applied
Hide
Offensive Security Agent Engineer
New York City or Seattle or Washington or San Francisco or United States
$347k-$490k/yr RemoteFull Time
OpenAI
OpenAI: Develops artificial intelligence models and generative AI software services.
Staff/principal-level offensive security expertise, domain knowledge in cloud/Kubernetes/web/Linux/macOS, experience building production software and agent systems, strong judgment and communication.
Kubernetes, Linux, macOS
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Engineer, Offensive Security
Louisville or Charlotte or Tampa or Dallas or Washington or Chicago or Atlanta or New York City or Nashville or Miami or Boston
$118k-$162k/yr RemoteFull Time
Humana
HumanaNYSE: HUM: Provides health insurance plans and clinical healthcare services.
4+ YOE4+ years red-team/pen-test experience, production Python engineering, agentic AI/LLM tooling experience, AI adversarial testing, and production cloud experience (AWS/GCP/Azure).
Python, Cobalt Strike, Sliver, Mythic, EDR, XDR, NDR, DLP, MITRE ATT&CK, VECTR, Atomic Red Team, PyRIT, Garak, MITRE ATLAS, OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework, Model Context Protocol (MCP), Hack The Box, AWS, GCP, Azure
Job PostingView all
1mo
Save
Mark Applied
Hide
Sr. Staff Security Engineer – AI, VMR, Offensive Security
Bethesda or Palo Alto or Dallas or Seattle
$120k-$260k/yr OnsiteFull Time
GEICO
GEICO: Provides vehicle and property insurance services to consumers.
10+ YOE10+ years in security engineering with deep vulnerability management and offensive security experience; hands-on cloud (AWS/Azure/GCP), programming (Python, Go, Java), NIST CSF, compliance (PCI, SOX, NYDFS), and strong leadership and communication skills.
AWS, Azure, GCP, Python, Go, Java, NIST CSF, SIEM, SOAR, CI/CD, CMDB, AI
Job PostingView all
1w
Save
Mark Applied
Hide
AI Security Engineer, AI Security Unit
Washington, District of Columbia, United States
RemoteFull Time
Check Point Software Technologies
Check Point Software TechnologiesNASDAQ: CHKP: Provides network, cloud, and mobile cybersecurity solutions.
Offensive security experience (red teaming/pen testing), deep LLM vulnerability knowledge, threat modeling, automation/tooling development, client-facing delivery and strong technical writing.
OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, MITRE ATLAS, Model Context Protocol (MCP)
Job PostingView all
3mo
Save
Mark Applied
Hide
Senior Security Engineer
McLean, Virginia, United States
OnsiteFull Time
Range
Range: AI-powered platform for wealth management and financial planning.
6+ YOE6+ years security engineering; offensive security; cloud AWS; tooling for security testing (Python/Go); web app vulnerability analysis; threat modeling; translate findings to engineering.
Python, Go, AWS, ECS, EC2, RDS, S3, IAM
Job PostingView all
1mo
Save
Mark Applied
Hide
Web Developer Security Engineer
Washington, District of Columbia, United States
HybridFull Time
Nationwide IT Services
Nationwide IT Services: Provides IT and management consulting services to federal government agencies.
3+ YOE3+ years in application security/SSDLC, strong OWASP knowledge, vulnerability lifecycle management, DevSecOps/CI-CD integration, WAF and FIM experience, Tier II security operations, relevant application/offensive/foundational security certification.
C#, ASP.NET MVC, WCF, HTML5, CSS3, JavaScript, React, TypeScript, REST APIs, SQL, Python, Node.js, Java, GitHub Copilot, WAF, File Integrity Monitoring (FIM), SIEM, IDS/IPS, NDR, EDR, AWS, Docker, Kubernetes
Job PostingView all
1mo
Save
Mark Applied
Hide
Staff Application Security Engineer
Washington, District of Columbia, United States
$150k-$173k/yr OnsiteFull Time
The Nuclear Company
The Nuclear Company: Deploys standardized nuclear reactors for utility-scale energy generation.
4+ YOE4+ years in application/product/software security; experience with secure SDLC tooling (GitHub Advanced Security, CodeQL, Dependabot, SAST/SCA/DAST), familiarity with AWS security, ability to read code (Python, TypeScript, Go, Java, C#, C++), strong communication and offensive-security mindset.
GitHub, GitHub Advanced Security, CodeQL, Dependabot, SAST, SCA, DAST, Palantir Foundry, AWS, IAM, CI/CD, Python, TypeScript, Go, Java, C#, C++, OWASP ASVS, OWASP Top 10, OWASP API Security Top 10, NIST CSF, NIST 800-53, SOC 2, IEC 62443, NERC CIP
Job PostingView all
2mo
Save
Mark Applied
Hide
Cyber Security Engineer V
Woodbridge, Virginia, United States
OnsiteFull Time
Redhorse
Redhorse: Delivering data insights and technology solutions to government agencies.
7+ YOEActive Top Secret/SCI with CI Poly; 7+ years in offensive cyber engineering or related fields; strong networking; Linux administration; experience integrating cyber tools into workflows; bachelor’s in a technical field or equivalent experience with certifications.
Linux, Networking, CNO tools
Job PostingView all
6h
Save
Mark Applied
Hide
Vectra Detection Engineer
Chantilly, Virginia, United States
OnsiteFull Time
GuidePoint Security
GuidePoint Security: Provides cybersecurity consulting, managed services, and integrated technology solutions.
Requires active TS/SCI clearance, network traffic analysis and threat detection experience, Suricata experience, offensive security knowledge, MITRE ATT&CK familiarity, and understanding of networking protocols and OSI layers.
Suricata, MITRE ATT&CK, Greenhouse Software, Zoom Scheduler
Job PostingView all
1mo
Save
Mark Applied
Hide
Cyber Capability Developer
Chantilly, Virginia, United States
OnsiteFull Time
AnaVation
AnaVation: Providing technical engineering and cybersecurity solutions for federal agencies.
8+ YOEActive Top Secret clearance with SCI eligibility and ability to obtain a CI polygraph; US citizenship; typically 8+ years cyber/software experience (varies by degree); expertise in offensive/defensive cyber tools, exploit research, reverse engineering, secure development, and complex networking.
CI/CD, git, VPN, firewall, proxy, network diode, COTS, GOTS
Job PostingView all
1w
Save
Mark Applied
Hide
Lead Penetration Test Engineer
Princeton or Boston or Chicago or Dallas or Houston or Englewood or Raleigh or New York or Southfield or Washington or Toronto or Calgary
$135k-$200k/yr HybridFull Time
S&P Global
S&P GlobalNYSE: SPGI: Provides independent credit ratings, market benchmarks, and financial analytics.
8+ YOE8+ years in information security focused on penetration testing, vulnerability management and application/cloud security; offensive security certification required; strong scripting skills and ability to communicate findings.
Burp Suite, Nessus, Metasploit, Nmap, MITRE ATT&CK, Bash, Python, Go, PowerShell, JavaScript, DAST, SAST, SCA, AWS, Azure, GCP
Job PostingView all
2w
Save
Mark Applied
Hide
Cybersecurity Engineer
Oklahoma City or Chantilly
$90k-$190k/yr HybridFull Time
CACI International
CACI InternationalNYSE: CACI: Provides information technology and engineering services for government agencies.
7+ YOEBachelor's in related field and 7+ years experience; skills in offensive/defensive security, incident response, OS hardening, vulnerability assessment, Splunk; GPEN/GWAPT/OSCP/OSWA/CISSP/CCSP preferred.
Splunk, Python, JavaScript, Go, .NET
Job PostingView all
2mo
Save
Mark Applied
Hide
iOS Vulnerability Researcher
Arlington, Virginia, United States
RemoteFull Time
Interrupt Labs
Interrupt Labs: Provides specialized vulnerability research and offensive security services.
Experience in vulnerability research, offensive security, and reverse engineering on Apple platforms; proficient in Python and Rust; able to reverse engineer ARM64 and use IDA, Binary Ninja, Frida.
Python, Rust, C, Swift, C++, Objective-C, IDA, Binary Ninja, Frida
Job PostingView all
1w
Save
Mark Applied
Hide
Principal Group Software Engineering Manager
Redmond or Mountain View or Reston or New York City or Austin or Boston
$166k-$296k/yr HybridFull Time
Microsoft
MicrosoftNASDAQ: MSFT: Develops software, services, devices, and cloud computing solutions.
8+ YOE6+ MgmtBachelor's in CS or related and 8+ years technical engineering experience (or equivalent); experience leading engineering organizations; offensive/defensive security and AI/ML experience preferred; coding in C/C++/C#/Java/JavaScript/Python; B2B security screening.
C, C++, C#, Java, JavaScript, Python
Job PostingView all
3w
Save
Mark Applied
Hide
Technical Targeting Analyst
McLean, Virginia, United States
$135k-$216k/yr OnsiteFull Time
Peraton
Peraton: National security and mission-critical government technology services provider.
8+ YOEActive TS/SCI with polygraph, 6–8+ years technical experience (analysis, network engineering/security, offensive ops, collection, reverse engineering, exploitation), experience with collection/dissemination systems, strong writing and communication.
Job PostingView all
3w
Save
Mark Applied
Hide
Technical Targeting Analyst
McLean, Virginia, United States
$135k-$216k/yr OnsiteFull Time
Peraton
Peraton: Provides advanced technology and mission support for government agencies.
8+ YOEActive TS/SCI with polygraph; bachelor\u0002s in technical field (or equivalent); 6+ years technical experience across analysis, network/security, offensive ops, reverse engineering, or exploitation; 3+ years with collection/dissemination systems.
Job PostingView all

Explore Jobs

Expand Your Job Search