Senior Security Engineer focused on offensive security, penetration testing, and remediation for TypeScript/Node.js applications and AWS infrastructure.
Compensation
Base salary may vary depending on, but not limited to: skills, experience, and location. This role is also eligible for a comprehensive benefits package and annual bonus program.
US Pay Range
$180,000—$195,000 USD
Responsibilities
Plan and run red team, purple team and application penetration tests mapped to MITRE ATT&CK
Test TypeScript web apps and APIs for OWASP Top 10 and API Top 10 issues
Continuously test new features in production under agreed rules of engagement
Attack identity stack (OIDC/OAuth, SSO, session handling) to validate controls
Build and operate agentic red team workflows using LLM-driven agents
Design, implement, and optimize identity and access management, API gateway protections, and runtime security controls for modern applications and APIs.
Compensation
The pay range for this position is $65.00 - $72.00/hr.
Responsibilities
Design and implement secure Identity and Access Management (IAM) solutions using OAuth2, OpenID Connect (OIDC), JSON Web Tokens (JWT), and related standards.
Define and manage scopes and claims to ensure least-privilege access and prevent overly broad token authorizations.
Configure and optimize secure API gateways, including rate limiting, request validation, and other traffic control mechanisms.
Establish and enforce API security policies to protect internal and external services from misuse and abuse.
Identify and mitigate threats against APIs and applications, including OWASP Top 10 API vulnerabilities, injection attacks, and credential stuffing.
Senior Security Engineer, Offensive Security & RemediationNewWeight Watchers · US
Cyber Security Engineer (f/m/d) Infrastructure & AI Platform SecurityNewIONOS EN · Bucharest, Romania
Application Security ArchitectTEKsystems · Charlotte, US