Senior Offensive Security Engineer

Senior Offensive Security Engineer

World Wide Technology's Information Security organization is hiring a Senior Offensive Security Engineer to help build and mature an offensive security capability that identifies and validates real-world risk across the organization's applications, networks, and cloud infrastructure. While this role sits within the Application Security team, your scope extends well beyond applications. You'll plan and execute offensive engagements across organization-owned web applications and APIs, internal and external networks, and cloud environments, thinking like an adversary to find what automated tooling misses. Your focus is hands-on testing, retesting, and validation paired with clear, actionable reporting that helps both engineers and leadership understand and close real risk. You'll partner closely with multiple teams to drive remediation, strengthen detection, and inform testing priorities across the business. This is a role for an offensive security practitioner who wants to build a program, not just execute within one.

Key Responsibilities

• Plan and execute offensive tests across WWT owned web applications, APIs, internal and external networks, and cloud infrastructure
• Retest and validate remediated findings to confirm the fixes resolve the gaps
• Support scoping, oversight, and execution of internal and third-party engagements

• Write clear, actionable reports for technical teams and leadership with reproducible steps and remediation guidance
• Track and report on trends across engagements, such as recurring finding types, time-to-remediate, and risk exposure, to inform leadership and program prioritization

• Collaborate across engineering, security, and GRC to drive remediation, validate findings, and inform testing prioritities
• Support compliance-driven testing requirements
• Contribute adversary-perspective input into threat modeling, architecture/design reviews, secure coding standards, and vulnerability management program

• Maintain and evolve internal testing playbooks as the program matures
• Leverage AI tools to accelerate testing workflows, analysis, and reporting
• Build, adapt, or evaluate offensive security tooling and third-party vendors to support testing and reduce manual overhead

• Mentor team members on offensive techniques, tools, and adversarial mindset
• Stay current on emerging attack techniques, CVEs, and adversary TTPs relevant to WWT's technology stack