jobapplier

Senior Security Engineer (Threat & Offensive Security)

Valon Mortgage

Skills

Required

  • security testing
  • threat intelligence
  • penetration testing
  • monitoring
  • SIEM
  • EDR
  • threat management
  • MITRE
  • AI
  • Nmap

Preferred

  • cloud environments
  • security testing methodologies

Join Valon as a Senior Security Engineer specializing in Threat & Offensive Security. In this role, you will proactively identify weaknesses in our systems, networks, and applications, ensuring security is embedded across our environment. You will conduct security testing, manage security tools, and collaborate with cross-functional teams to remediate vulnerabilities. This position offers a competitive compensation package, flexible work options, and comprehensive health benefits.

We are seeking an experienced and skilled Senior Security Engineer, Threat & Offensive Security to join our growing team!

Responsibilities

  • Conduire et réaliser des tests de sécurité et des tests de pénétration sur des applications, des infrastructures et des réseaux pour identifier les vulnérabilités exploitables.
  • Gérer et mettre en œuvre des outils et des cadres de test de sécurité pour simuler des attaques réelles et valider l'efficacité des contrôles de sécurité existants.
  • Collaborer avec les équipes d'ingénierie, d'informatique, de produits et d'autres équipes pour remédier aux vulnérabilités identifiées et renforcer les contrôles de sécurité.
  • This position requires a deep understanding of adversarial techniques, security testing methodologies, threat intelligence, and incident response, along with the ability to collaborate with cross-functional teams

Requirements

  • Minimum of 5 years in a security engineering, penetration testing, threat intelligence, or similar roles with relevant responsibilities and background
  • Experience with security testing, monitoring, and response technologies (threat intelligence platforms, vulnerability scanners, SIEM, EDR, or similar)
  • Relevant security certifications (e.g., CISSP, CEH, OSCP, GPEN, GCIH or similar)
  • Bachelor's degree in Computer Science, Information Security, Technology, or a related field
  • Importantly, this role requires an AI and automation-first approach to security work, using modern tools to scale testing, threat management, and response
  • Applied knowledge of industry security and testing frameworks (OWASP, NIST, MITRE ATT&CK, CIS, SOC 2/ISO 27001 concepts)
  • Ability to foster strong relationships and partner with stakeholders to drive remediation and results
  • Excellent communication and collaboration skills, with the ability to explain technical findings and risk to both technical and non-technical stakeholders
  • Experience with cloud security and environments (GCP, AWS)
  • Ability to work autonomously, lead projects, and navigate complex, ambiguous security investigations

Experience with SIEM, EDR, and other detection/monitoring platforms

  • Strong understanding of common attack techniques, exploitation methods, and MITRE ATT&CK or related
  • Proficient in both manual and automated testing techniques, understanding when manual analysis is needed versus pure automated testing
  • Demonstrated experience leveraging AI and automation to improve the efficiency and scalability of threat detection, testing, and response operations
  • Hands-on experience with security testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap, Cobalt Strike, or similar)
  • Proven experience in security engineering, red team, or threat management role, with a focus on penetration testing, security testing, threat intelligence, and/or incident response

Preferred

  • Knowledge of cloud environments
  • Experience or exposure to startup environments is a plus

Pay

USD 180,000 - 230,000