- United States
- Hybrid
- Full-time · Senior
- $180K–$195K per year
- 6+ years
Senior Security Engineer focused on offensive security, penetration testing, and remediation for TypeScript/Node.js applications and AWS infrastructure.
Compensation
Base salary may vary depending on, but not limited to: skills, experience, and location. This role is also eligible for a comprehensive benefits package and annual bonus program. US Pay Range $180,000—$195,000 USD
Responsibilities
- Plan and run red team, purple team and application penetration tests mapped to MITRE ATT&CK
- Test TypeScript web apps and APIs for OWASP Top 10 and API Top 10 issues
- Continuously test new features in production under agreed rules of engagement
- Attack identity stack (OIDC/OAuth, SSO, session handling) to validate controls
- Build and operate agentic red team workflows using LLM-driven agents
Requirements
- Nice to have: React/Next.js
- Nice to have: NestJS
- Nice to have: Express
- Nice to have: npm supply chain security
- Nice to have: SBOMs