{"id":120324,"url":"https://alion.io/job/offchain-senior-security-engineer-offensive-4","title":"Senior Penetration Tester (AWS)","company":{"id":716542,"name":"Offchain","domain":"offchain.io","url":"https://alion.io/company/offchain-3","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"C","score":65,"open_postings":12,"ghost_share":0.583,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":122000,"max_usd":216000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":340},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Aave","optional":false},{"name":"Arbitrum","optional":false},{"name":"AWS","optional":false},{"name":"Burp Suite","optional":false},{"name":"Ethena","optional":false},{"name":"Ethereum","optional":false},{"name":"Go","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nuclei","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SOC 2","optional":false},{"name":"DeFi","optional":true},{"name":"Smart Contracts","optional":true},{"name":"ZeroDev","optional":true}],"status":"live","first_seen_at":"2025-05-23T16:44:16Z","employer_posted_date":"2025-05-23","last_verified_at":"2026-10-16T19:46:49Z","board_verified":true,"closed_at":null,"days_open":511,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":510},"description":"At Offchain, we aren’t just building products: we’re leading a movement.\nAs pioneers in blockchain scalability and security, we're at the forefront of transforming how the world interacts with decentralized applications. We're laying the foundation that will define the next generation of digital commerce, governance, and human interaction. This involves tackling real-world challenges that come with scaling blockchain technology, without compromising on its core principles: decentralization, security and transparency.\nAt the center of this vision is our people. Our team is made up of thinkers and doers that embrace new challenges and seek solutions that push existing boundaries. If you’re energized by solving unprecedented problems, and believe in the role that decentralized systems will play in creating a more equitable digital future, then we want to hear from you.\nWhy Offchain?\nOffchain is setting the pace for the entire Ethereum ecosystem. We built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution that exists today.\nArbitrum’s ecosystem is undergoing tremendous growth with hundreds of projects and dApps on Arbitrum One today. Over 100 different teams have used Offchain technology to build their own Arbitrum chains. Major players in the space, Robinhood, BlackRock, Ethena Labs, Securitize, Aave, and Apechain are all using the Arbitrum stack.\nArbitrum’s thriving ecosystem wouldn’t exist without our advanced technology stack. Arbitrum, Prysm, ZeroDev. These aren’t just product names. These are tools that are actively reshaping what's possible on Ethereum and advancing its core infrastructure.\nTo top it all off? We’re backed by $124 million in funding. We’ve demonstrated consistent execution with billions in secured value, thousands of supported projects, and infrastructure processing millions of transactions seamlessly.\nThe Role\nAs a Senior Security Engineer at Offchain, you will emulate the real-world tactics, techniques, and procedures of sophisticated adversaries to surface vulnerabilities across our infrastructure and ecosystem tools.\nYou’ll run hands-on penetration tests, lead red team exercises, and work side-by-side with blue team partners to test, refine, and strengthen detection and response capabilities.\nYour efforts will directly shape how Offchain designs, launches, protects, and achieves compliance for the infrastructure that powers millions of users and applications - including key standards such as SOC 2.\nWhat you'll do:\nConduct comprehensive code audits across a variety of internal applications and infrastructure.\nConduct comprehensive penetration tests across cloud environments (AWS), infrastructure, and backend applications.\nCollaborate with detection engineering, threat intelligence, and incident response groups to review security controls, uncover coverage gaps, and enhance overall detection quality.\nBuild, maintain, and evolve custom offensive tools, scripts, and automation frameworks to increase assessment speed.\nOffer offensive security expertise during incident investigations, including log analysis and root cause reviews.\nKeep up with evolving threats, vulnerabilities, and attack methods; share research internally and engage with the wider security community.\nOwn offensive security projects from start to finish, mentor junior team members, and cultivate a culture of ongoing learning and knowledge exchange.\nWhat you'll need:\n5+ years of experience in offensive security, penetration testing, red teaming, or a closely related field.\nExtensive experience with conducting code audits to identify and remediate security issues.\nExperience with binary exploitation.\nMastery of AWS & specific attack techniques and configuration weaknesses.\nStrong understanding of adversary tactics and frameworks like MITRE ATT&CK.\nIn-depth knowledge of web application security, including OWASP Top 10, ASVS, and common vulnerability categories.\nProficiency using offensive security tools such as Burp Suite, nuclei and similar frameworks.\nStrong programming skills in Python, Go, or similar languages, with proven experience developing tools or automation.\nExcellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations.\nA natural ability to think like an attacker - creative, determined, and skilled at assessing risk across complex systems.\nNice-to-haves\nWeb3 / blockchain security exposure: smart contract auditing, bug bounty hunting (e.g., Immunefi, Code4rena), or DeFi protocol review.\nFamiliarity with Ethereum L1 / L2 node architecture and security risks.\nExperience in blockchain infrastructure penetration testing.\nPerks:\nRemote-first global workforce + NY office\nProfessional reimbursement program (facilitates industry conference attendance, certifications, and more)\nMedical, dental & vision coverage (US + some other countries)\n401k retirement plan + company match (US only)\nWellness stipend\nHome office set up / ergonomic equipment program","description_format":"text","description_chars":5048,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Home office","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Cryptocurrencies","Web3 & dApps","Blockchain Infrastructure"],"lifecycle":[{"event":"open","at":"2025-05-23T16:44:16Z"}],"visa":[],"liveness":{"score":3,"band":"cold","label":"Long shot","p_open":1,"p_active":0.113,"p_room":0.28,"age_days":510,"expected_fill_days":35,"reasons":["conf:3","stale_co","ghost","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/offchain-senior-security-engineer-offensive-4","json_url":"https://alion.io/job/offchain-senior-security-engineer-offensive-4.json","meta":{"generated_at":"2026-10-16T22:18:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3889,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":716542},"rest":"https://alion.io/mcp/rest/get_company?id=716542"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foffchain-senior-security-engineer-offensive-4"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foffchain-senior-security-engineer-offensive-4"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foffchain-senior-security-engineer-offensive-4"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/offchain-senior-security-engineer-offensive-4\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foffchain-senior-security-engineer-offensive-4"}]}