Senior Security Engineer (Threat & Offensive Security)
Confirmed on the employer's own hiring board on Oct 18, 2026. First seen by Alion on Sep 11, 2026.
Join Valon as a Senior Security Engineer specializing in Threat & Offensive Security. In this role, you will proactively identify weaknesses in our systems, networks, and applications, ensuring security is embedded across our environment. You will conduct security testing, manage security tools, and collaborate with cross-functional teams to remediate vulnerabilities. This position offers a competitive compensation package, flexible work options, and comprehensive health benefits.
Missions
- Conduire et réaliser des tests de sécurité et des tests de pénétration sur des applications, des infrastructures et des réseaux pour identifier les vulnérabilités exploitables.
- Gérer et mettre en œuvre des outils et des cadres de test de sécurité pour simuler des attaques réelles et valider l'efficacité des contrôles de sécurité existants.
- Collaborer avec les équipes d'ingénierie, d'informatique, de produits et d'autres équipes pour remédier aux vulnérabilités identifiées et renforcer les contrôles de sécurité.
Profil recherché
- We are seeking an experienced and skilled Senior Security Engineer, Threat & Offensive Security to join our growing team!- This position requires a deep understanding of adversarial techniques, security testing methodologies, threat intelligence, and incident response, along with the ability to collaborate with cross-functional teams
- Minimum of 5 years in a security engineering, penetration testing, threat intelligence, or similar roles with relevant responsibilities and background
- Experience with security testing, monitoring, and response technologies (threat intelligence platforms, vulnerability scanners, SIEM, EDR, or similar)
- Knowledge of cloud environments
- Relevant security certifications (e.g., CISSP, CEH, OSCP, GPEN, GCIH or similar)
- Bachelor's degree in Computer Science, Information Security, Technology, or a related field
- Importantly, this role requires an AI and automation-first approach to security work, using modern tools to scale testing, threat management, and response
- Experience or exposure to startup environments is a plus
- Applied knowledge of industry security and testing frameworks (OWASP, NIST, MITRE ATT&CK, CIS, SOC 2/ISO 27001 concepts)
- Ability to foster strong relationships and partner with stakeholders to drive remediation and results
- Excellent communication and collaboration skills, with the ability to explain technical findings and risk to both technical and non-technical stakeholders
- Experience with cloud security and environments (GCP, AWS)
- Ability to work autonomously, lead projects, and navigate complex, ambiguous security investigations
- Experience with SIEM, EDR, and other detection/monitoring platforms
- Strong understanding of common attack techniques, exploitation methods, and MITRE ATT&CK or related
- Proficient in both manual and automated testing techniques, understanding when manual analysis is needed versus pure automated testing
- Demonstrated experience leveraging AI and automation to improve the efficiency and scalability of threat detection, testing, and response operations
- Hands-on experience with security testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap, Cobalt Strike, or similar)
- Proven experience in security engineering, red team, or threat management role, with a focus on penetration testing, security testing, threat intelligence, and/or incident response