Senior Offensive Security Tester
SMX USA · Posted Nov 6, 2026
- Remote, United States
- Remote
- Full-time · Senior
- 6+ years
Run ongoing offensive testing across web applications, APIs, internal networks and cloud configurations, closing the gaps between annual pen tests and one-off engagements.
Responsibilities
- Run ongoing offensive testing across web applications, APIs, internal networks and cloud configurations
- Target policy administration, claims processing and customer/agent portals, with emphasis on business-logic flaws such as rate manipulation, claims fraud vectors and authorization bypass
- Build and maintain custom exploit and test tooling tailored to the client's tech stack, reducing reliance on generic scanners
- Validate and document findings with clear reproduction steps, severity and business impact
- Feed findings into a remediation-tracking loop with engineering and retest fixes to shorten time-to-fix on critical vulnerabilities
Requirements
- Nice to have: OSCP
- Nice to have: OSEP
- Nice to have: OSWE
- Nice to have: GPEN
- Nice to have: GWAPT