HiringCafe
Join our community

32 offensive security jobs at 25 companies in New York City, NY

1d
Save
Mark Applied
Hide
Offensive Security Manager
Chicago or Washington or Tallahassee or Sarasota or Hartford or Nashville or San Jose or Atlanta or Boston or Burlington or Cleveland or Columbus or Manchester or Dallas or Denver or Fort Lauderdale or Fort Wayne or Grand Rapids or Indianapolis or Knoxville or Lexington or Plano or Livingston or Louisville or Los Angeles or Miami or New York City or Oakbrook Terrace or Sacramento or San Francisco or South Bend or Springfield or Tampa or Houston or Austin or Charlotte
$105k-$214k/yr OnsiteFull Time
Crowe
Crowe: Global professional services firm providing audit, tax, and consulting.
Bachelor’s degree, CISSP/OSCP/OSCE or similar certification, and 5+ years in cybersecurity or offensive security. Requires operating systems, databases, networks, offensive tools, scripting, and communication expertise.
NIST Cybersecurity Framework (NIST CSF), NIST 800.53, CIS, Windows, Linux, Unix, SQL, Oracle, Metasploit, Burp Suite, BloodHound, Nmap
Job PostingView all
2mo
Save
Mark Applied
Hide
Offensive Security Researcher, Kernel & Embedded Security
New York City, New York, United States
OnsiteFull Time
Apple
AppleNASDAQ: AAPL: Designs and sells consumer electronics, software, and online services.
Conduct offensive security research to find and fix vulnerabilities across Apple products to protect users; work as part of a security engineering and research team.
Job PostingView all
2w
Save
Mark Applied
Hide
Staff Offensive Security Engineer
New York City, New York, United States
$200k-$250k/yr HybridFull Time
Cloaked
Cloaked: Consumer privacy platform for managing digital identity and data.
Advanced offensive security expertise, exploit development, coding fluency, multi-cloud and SaaS architecture mastery, strong communication, and ability to prioritize and remediate business-critical risks.
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Offensive Security Engineer - Pentester
Denver or Washington or Seattle or Charlotte or Jacksonville or Jersey City or Chicago
$160k-$205k/yr OnsiteFull Time
Bank of America
Bank of AmericaNYSE: BAC: Provides banking, investment, and financial risk management services.
5+ YOE5+ years offensive security experience, proficiency with pentesting tools, strong understanding of networks/OS/Active Directory, ability to code (Python/Java/C#), report vulnerabilities, mentor junior engineers.
Burp Suite, Metasploit, nmap, Python, Java, C#
Job PostingView all
1mo
Save
Mark Applied
Hide
Lead, Offensive Security
Louisville or New York City or Dallas or Charlotte or Tampa or Miami or Washington or Chicago or Boston or Atlanta or Nashville
$142k-$196k/yr RemoteFull Time
Humana
HumanaNYSE: HUM: Provides health insurance plans and clinical healthcare services.
6+ YOE6+ Mgmt6+ years in red team/penetration testing with leadership experience; production Python engineering; built or operated agentic AI/LLM applications; experience attacking AI/ML systems; production cloud experience (AWS, GCP, or Azure).
Python, PyRIT, Garak, MITRE ATLAS, OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework, AWS, GCP, Azure, Hack The Box Pro Labs
Job PostingView all
1w
Save
Mark Applied
Hide
Sr. Associate, Offensive Security
New York City or Collegeville
$79k-$132k/yr HybridFull Time
Pfizer
PfizerNYSE: PFE: Develops and manufactures vaccines and medicines for global healthcare
2+ YOERequires cybersecurity experience, penetration testing or security assessment skills, attack technique knowledge, technical reporting, scripting, and collaboration. Degree and experience alternatives are specified.
MITRE ATT&CK, Python, PowerShell, Bash
Job PostingView all
3w
Save
Mark Applied
Hide
Offensive Security Agent Engineer
New York City or Seattle or Washington or San Francisco or United States
$347k-$490k/yr RemoteFull Time
OpenAI
OpenAI: Develops artificial intelligence models and generative AI software services.
Staff/principal-level offensive security expertise, domain knowledge in cloud/Kubernetes/web/Linux/macOS, experience building production software and agent systems, strong judgment and communication.
Kubernetes, Linux, macOS
Job PostingView all
2w
Save
Mark Applied
Hide
Artificial Intelligence (AI) Offensive Security Analyst
Tampa or Irving or Jacksonville or Jersey City or New York City
$87k-$212k/yr HybridFull Time
Citi
CitiNYSE: C: Global diversified financial services holding.
5+ YOERequires penetration testing or vulnerability assessment experience, AI and LLM literacy, security testing tools, OWASP knowledge, clear technical writing, and a bachelor's degree or equivalent practical experience.
Burp Suite, nuclei, nmap, OWASP Top 10, OWASP LLM Top 10, MITRE ATLAS, Garak, PyRIT, PromptBench, Inspect AI, Large Language Models (LLMs), MITRE ATT&CK Framework
Job PostingView all
5d
Save
Mark Applied
Hide
Artificial Intelligence (AI) Offensive Security Analyst
Tampa or Jacksonville or New York City or Jersey City or Irving
$87k-$212k/yr HybridFull Time
Citi
CitiNYSE: C: A global financial services providing banking and credit services.
5+ YOERequires penetration testing or Red Team experience, security testing tools, OWASP knowledge, LLM understanding, AI tool experience, clear technical writing, and a bachelor's degree or equivalent practical experience.
Burp Suite, nuclei, nmap, OWASP Top 10, OWASP LLM Top 10, MITRE ATLAS, Garak, PyRIT, PromptBench, Inspect AI, LLM, RAG, MITRE ATT&CK Framework
Job PostingView all
2w
Save
Mark Applied
Hide
Artificial Intelligence (AI) Offensive Security Analyst
Tampa or Jacksonville or Irving or New York City or Jersey City
$87k-$212k/yr HybridFull Time
Citi
CitiNYSE: C: Providing global banking, investment, and wealth management services.
5+ YOERequires 5+ years for AVP-level roles, penetration testing or red team experience, security testing tools, OWASP knowledge, AI/LLM literacy, clear technical writing, and a bachelor's degree or equivalent experience.
Burp Suite, nuclei, nmap, OWASP Top 10, OWASP LLM Top 10, MITRE ATLAS, Garak, PyRIT, PromptBench, Inspect AI, MITRE ATT&CK Framework, Large Language Models (LLMs)
Job PostingView all
3mo
Save
Mark Applied
Hide
Global Security Engineer Offensive Operations (Remote or Onsite)
Stamford, Connecticut, United States
HybridFull Time
Crane Company
Crane CompanyNYSE: CR: Manufactures engineered components for aerospace and industrial process markets.
5+ YOE5+ years in penetration testing and application security; Linux/Windows admin; offensive security tools; scripting; communication; degree or 5+ years experience.
Metasploit, Nmap, Burp Suite, Impacket, PowerShell, Python, Perl, Ruby, Go, Rust, Java, Linux, Windows
Job PostingView all
1mo
Save
Mark Applied
Hide
Detection & Response Security Engineer
New York, New York, United States
$188k-$282k/yr HybridFull Time
Harvey
Harvey: AI platform for legal research and document analysis.
4+ YOE4+ years in security, SRE, or software engineering; offensive security and incident response experience; strong networks, OS, and crypto knowledge; experience finding privilege escalation and responding to incidents.
ClickHouse
Job PostingView all
2w
Save
Mark Applied
Hide
AI Security Engineer, AI Security Unit
New York City, New York, United States
RemoteFull Time
Check Point Software Technologies
Check Point Software TechnologiesNASDAQ: CHKP: Provides network, cloud, and mobile cybersecurity solutions.
Proven offensive security and red teaming experience, deep knowledge of LLM vulnerabilities and AI attack surfaces, ability to develop automation and tooling, strong technical writing and client-facing skills, and familiarity with AI/ML architectures and threat modeling.
OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, MITRE ATLAS, Model Context Protocol (MCP)
Job PostingView all
2mo
Save
Mark Applied
Hide
Security Research Engineer
New York, New York, United States
$120k-$175k/yr OnsiteFull Time
Pensar
Pensar: AI-powered continuous adversarial security testing for developers.
5+ YOE5+ years in offensive security or vulnerability research; strong programming in Python, Go, JavaScript, C/C++; experience running end-to-end pentests, customer-facing communication, and open source contributions; Bachelor's degree or equivalent.
Apex, Python, Go, JavaScript, C/C++, AWS, GCP, Azure, AI/LLM
Job PostingView all
3w
Save
Mark Applied
Hide
Senior Security Engineer, Cloud Red Team, Cloud CISO
Zürich or New York City
$174k-$252k/yr OnsiteFull Time
Google
GoogleNASDAQ: GOOGL: Provides online search, advertising, cloud computing, and consumer electronics.
5+ YOEBachelor's or equivalent,5+ years technical security experience,experience with vulnerability assessment/exploitation,offensive/cloud security and programming in Python,Go,Bash;strong communication and reporting skills.
Python, Go, Bash
Job PostingView all
1w
Save
Mark Applied
Hide
AI Security Research & Red Team Engineer
Austin or New York City
$166k-$208k/yr HybridFull Time
Cloudflare
CloudflareNYSE: NET: Provides security and performance services for internet properties.
4+ YOERequires 4+ years in offensive or application security, AI/LLM and agentic security expertise, penetration testing or exploit development, cloud security, MITRE ATT&CK, BAS tools, and strong communication skills.
LLMs, MITRE ATT&CK, AWS, GCP, Bare Metal, Automated Breach and Attack Simulation (BAS), WAF, EDR, SIEM
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Director – AI & Proactive Security
Centreville or Florida or California or Texas or Massachusetts or Pennsylvania or North Carolina or Minnesota or Rhode Island or Colorado or Michigan or New York
OnsiteFull Time
Mobility Global
Mobility GlobalNYSE: MBGL: Provider of critical automotive intelligence and lifecycle data solutions.
15+ YOE15+ years cybersecurity experience with offensive security/red teaming, AI/ML understanding, ability to operationalize AI security and lead cross-functional transformation.
AI Security Posture Management (AISPM), AWS Bedrock, GCP Vertex AI, MLOps
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Red Team Operator
Minneapolis or Atlanta or Cincinnati or Cupertino or Portland or New York or Chicago or Englewood or Charlotte or Irving
$133k-$157k/yr HybridFull Time
U.S. Bank
U.S. BankNYSE: USB: Provider of personal, business, and institutional financial services.
8+ YOEBachelor's degree or equivalent, 8+ years in information security with offensive security/Red Team experience; expertise in exploit development, offensive tooling, and scripting; strong communication and leadership.
Cobalt Strike, Metasploit, Mythic, Sliver, Python, PowerShell, C/C++, C#, Go, Shell, EDR, XDR, Infrastructure as Code (IaC)
Job PostingView all
2mo
Save
Mark Applied
Hide
Principal Red Team Operator
Iselin or Phoenix or Boston or Pittsburgh or Plano or Irving or Charlotte or Manchester
$120k-$210k/yr HybridFull Time
Citizens Financial Group
Citizens Financial GroupNYSE: CFG: Provides retail, commercial, and private banking services to customers.
4+ YOE4+ years hands-on red team/offensive security experience, adversary emulation, cloud/SaaS and AI security testing, strong communication and documentation, bachelor’s degree or equivalent experience, and advanced offensive certifications preferred.
Job PostingView all
2w
Save
Mark Applied
Hide
Lead Penetration Test Engineer
Princeton or Boston or Chicago or Dallas or Houston or Englewood or Raleigh or New York or Southfield or Washington or Toronto or Calgary
$135k-$200k/yr HybridFull Time
S&P Global
S&P GlobalNYSE: SPGI: Provides independent credit ratings, market benchmarks, and financial analytics.
8+ YOE8+ years in information security focused on penetration testing, vulnerability management and application/cloud security; offensive security certification required; strong scripting skills and ability to communicate findings.
Burp Suite, Nessus, Metasploit, Nmap, MITRE ATT&CK, Bash, Python, Go, PowerShell, JavaScript, DAST, SAST, SCA, AWS, Azure, GCP
Job PostingView all

Explore Jobs

Expand Your Job Search