Referso Jobs

Senior Principal - Red Team Engineer

HPE · Posted Nov 9, 2026

Open

Remote, United States
Remote
Full-time · Principal
$141K–$325K per year
9+ years

Senior Principal - Red Team Engineer

HPE · Posted Nov 9, 2026

Open

Remote, United States
Remote
Full-time · Principal
$141K–$325K per year
9+ years

Senior Principal - Red Team Engineer

HPE · Posted Nov 9, 2026

Open

Remote, United States
Remote
Full-time · Senior
$160K–$325K per year
9+ years

Apply with RefersoAI Apply on careers page

Senior Principal Red Team Engineer responsible for planning and executing advanced offensive cybersecurity engagements, developing tools, and leading AI-driven red team operations.

Compensation

The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. – United States of America: Annual Salary USD 160,000 - 325,000 in California // 141,000 - 325,000 in District of Columbia & Maryland & North Carolina & Texas & Virginia & Washington

Responsibilities

Plan and execute full-scope adversary emulation campaigns
Partner with detection and defensive teams to validate controls
Continuously conduct offensive security research and custom tooling development
Build and operate AI harnesses for red team operations

Requirements

Master’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent
Nice to have: Credited CVEs
Nice to have: Bug bounty participation
Nice to have: Security blogging
Nice to have: Publicly available quality code or tools

Skills

Red Team Operations Red Team Development Exploit Development Reverse Engineering

Senior Cloud & Application Security Engineer

AXON-Networks · Posted Nov 6, 2026

Open

Irvine, California, United States +1 more
Full-time · Senior
$150K–$220K per year
5+ years

Apply with RefersoAI Apply on careers page

Lead hands‑on security engineer focused on cloud, application, and DevSecOps practices within AXON Networks’ Information Security organization.

Locations (2)

Irvine, California, United States
United States

Compensation

Annual salary range: $150,000 - $220,000

Responsibilities

Partner with development teams to improve secure coding and application security practices
Review security findings from SAST, SCA, container scanning, secret detection, and other tooling
Assist teams in determining exploitability, exposure, severity, and remediation
Perform targeted manual security reviews of applications, APIs, and services
Participate in application and architecture threat modeling

Requirements

Nice to have: Go
Nice to have: Java
Nice to have: Python
Nice to have: C/C++
Nice to have: GitLab Ultimate security functionality

Software Secuirty Engineer - TS/SCI Clearance

CDW · Posted Nov 5, 2026

Open

Satellite Beach, Florida, United States
$190K–$230K per year

Apply with RefersoAI Apply on careers page

Software Security Engineer with TS/SCI clearance to review source code, application designs, and security testing results for U.S. government projects.

Compensation

Pay range: 190,000 - $230,000 depending on experience and skill set

Responsibilities

Perform manual security reviews of source code, pull requests, and application changes to identify vulnerabilities
Assess application security against approved security baseline including NIST SP 800-53, SP 800-218, DISA STIG
Translate controls into code review checklists, acceptance criteria, and developer guidance
Review authentication, authorization, input validation, session management, error handling, audit logging, secrets management, data protection, cryptographic implementation
Execute and interpret SAST, DAST, SCA, and secrets scanning

Requirements

Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or related discipline

Skills

Java C#Python JavaScript/TypeScript C/C++

Senior Application Security Specialist

Old Mutual Limited · Posted Nov 5, 2026

Open

Johannesburg
Senior
5+ years

Apply with RefersoAI Apply on careers page

Lead the Application Security team, build security into software, manage tooling, testing, and stakeholder engagement.

Responsibilities

Lead the Application Security team and set security standards
Run tooling and testing to verify security before release
Read scan output, scope tests, and challenge findings
Own the service and manage two analysts
Manage external penetration testing providers

Requirements

National diploma in Computer Science, Information Systems, Engineering or equivalent
Bachelor of Commerce (BCom) in Information Technology and Computer Science
Nice to have: OSCP
Nice to have: CISSP
Nice to have: Azure

Skills

SAST SCA DAST secrets scanning CI/CD pipelines OWASP Top 10 OWASP ASVS API Security Top 10

Arquiteto de Segurança de TI Senior com vivência com AppSec

LUZA Group · Posted Nov 7, 2026

Open

Remote
Remote
Full-time · Senior

Apply with RefersoAI Apply on careers page

Atuar em projetos estratégicos, contribuindo para adefinição e evolução da arquitetura de soluções, garantindo alinhamento entre estratégia de negócio, requisitos funcionais e tecnológicos.

Responsibilities

Contribuir para a definição e evolução da arquitetura de soluções
Garantir alinhamento entre estratégia de negócio, requisitos funcionais e tecnológicos
Promover soluções escaláveis, seguras, resilientes e aderentes aos padrões corporativos
Apoiar a transformação digital da organização por meio da integração e segurança entre áreas de negócio, tecnologia e fornecedores

Requirements

Nice to have: CISSP
Nice to have: CSSLP
Nice to have: SABSA
Nice to have: TOGAF
Nice to have: AZ-500

Skills

Arquitetura de aplicações e arquiteturas distribuídas microserviços e APIs Secure by Design Security Architecture Review OWASP Top 10 OWASP ASVS

Senior Penetration Tester API, Web & Cloud – Contract (all genders)

Distribusion Technologies · Posted Oct 27, 2026

Open

Remote
Remote
Contract · Senior
5+ years

Apply with RefersoAI Apply on careers page

Lead hands‑on penetration testing of public partner‑facing booking APIs, payment flows, web and mobile apps, and cloud infrastructure for a global travel tech platform.

Compensation

You will get a competitive salary.

Responsibilities

Test partner‑facing booking APIs against the OWASP API Security Top 10
Assess API authentication and integrity end to end, including OAuth 2.0/OIDC, API keys, JWTs, webhooks and request signing
Hunt for business‑logic abuse in booking, checkout, payment and refund flows
Run authenticated tests of traveller‑, partner‑ and operator‑facing web and mobile apps following OWASP WSTG and ASVS
Review cloud, Kubernetes and CI/CD configurations and secrets handling for attack paths

Requirements

Nice to have: OSCP
Nice to have: OSWE
Nice to have: BSCP
Nice to have: PCI‑DSS
Nice to have: LLM red‑team

Skills

penetration testing OWASP API Security Top 10 OWASP WSTG OWASP ASVS OAuth 2.0

Lead Security Engineer

Kainos · Posted Nov 4, 2026

Open

Birmingham

Apply with RefersoAI Apply on careers page

Lead Security Engineer (Consultant) responsible for leading security engineering and testing across Kainos Platforms and Services.

Responsibilities

Lead security engineering and testing efforts
Set direction on security testing methodology
Engage in scoping, outputs and tool/technology selections
Develop junior security engineers
Work with agile delivery teams to embed security practices

Requirements

Nice to have: Penetration testing qualifications (OSCP,CREST,TIGER)
Nice to have: Experience with external penetration test companies
Nice to have: Experience with security tools (Burp Suite, OWASP-ZAP,NMAP,Nessus,Kali,Metasploit)
Nice to have: Knowledge of OSINT, network scanning, enumeration, sniffing, session hijacking, social engineering, firewalls, honeypots, IDS/IPS/WAF/AV/DLP, Cryptography/PKI,IoTthreats,trojans,viruses,worms,backdoors,ransomware
Nice to have: Active participation in knowledge sharing

Skills

Securing Web Applications Securing Cloud Platforms Penetration testing Source code security assessment Continuous Security Continuous Integration Continuous Delivery Knowledge of NCSC,NIST,CIS,PCI,GDPR,OWASP ASVS,HIPPA,SOC2 Knowledge of OWASP Top 10, SQL,XSS,XXE,MITM Programming or scripting experience across Windows/Linux/MacOS Burp Suite OWASP-ZAP NMAP

See full job description

Application Security Engineer (Contractor)

Radicle Health · Posted Nov 4, 2026

Open

Remote
Remote
Contract · Mid
$62–$62 per hour
3–5 years

Apply with RefersoAI Apply on careers page

A hands-on technical engineer to architect software security tooling and integrate security in the software development process for 10 SaaS platforms.

Compensation

Compensation: $62.00/hour

Responsibilities

Assist initiatives and projects to support and enhance security in our application development processes.
Bring your ideas forward, evaluating how to optimize the tools we're using and exploring technologies to enhance our security posture and support scalability.
Conduct internal penetration testing and code reviews.
Create, update, and maintain threat models for a wide variety of software projects.
Leverage AI to automate workflows and build efficiencies.

Requirements

Nice to have: NIST
Nice to have: HIPAA

Skills

scripting development web applications cloud engineering Infrastructure as Code AWS

OWASP ASVS jobs

Compensation

Responsibilities

Requirements

Skills

Benefits

Compensation

Responsibilities

Requirements

Skills

Locations (2)

Compensation

Responsibilities

Requirements

Compensation

Responsibilities

Requirements

Skills

Responsibilities

Requirements

Skills

Responsibilities

Requirements

Skills

Compensation

Responsibilities

Requirements

Skills

Responsibilities

Requirements

Skills

Compensation

Responsibilities

Requirements

Skills

Benefits

Skills

Benefits

Benefits