Senior Offensive Security Engineer

Join Robinhood, a company dedicated to improving financial access for all. As a Senior Offensive Security Engineer, you will play a crucial role in identifying and reducing real-world security risks by simulating adversary behavior and testing defenses. You will plan and execute security assessments, prioritize risk, contribute to remediation efforts, and develop tools and techniques to enhance security. Your work will directly impact the safety and reliability of products used by millions of customers.

• Plan and execute security assessments across applications, infrastructure, and physical environments, and partner closely with engineering and security teams to strengthen detection and response capabilities.
• Lead red team exercises, including long-term assessments that simulate real-world attack scenarios, and perform threat modeling and penetration testing across various environments.
• Mentor and provide guidance to the members of the Offensive Security team, and communicate findings clearly to work with engineering teams to remediate identified risks.

• We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for thoughtful problem-solvers and builders who want to make a meaningful contribution
• Demonstrated experience working with a distributed team
• Passion and demonstrated experience for challenging security assumptions
• Strong understanding of the security fundamentals of access and identity
• Ability to research and execute a testing plan to access a new technology or process
• Experience/knowledge of defensive tools/techniques (IDS/IPS, Packet Capture, Network Analysis, AV, EDR, etc.) and how to evade them
• Excellent written and verbal communication skills and ability to communicate your findings at many different levels of abstraction from Engineers to Executives
• Passion for fixing security issues and not just identifying security issues
• Experience with MacOS and Linux
• 6+ years of experience conducting red team operations or advanced penetration testing
• Comfortable reading / writing python, go, and javascript
• Proficiency to communicate over a text-based medium (Slack, JIRA Issues, GitHub issues, & Email) and can succinctly document technical details
• Experience with leveraging components of a modern software development stack to attack companies, including CI, container orchestration systems (Kubernetes/Docker), cloud providers (AWS, GCP), etc and be able to give hardening suggestions
• Deep understanding of Mitre’s ATT&CK Framework
• Familiarity with common network protocols and standards such as DNS and TCP/IP
• Experience mentoring or supporting the development of other security engineers
• Experience in the Financial Technology domain
• Experience being a technical lead at other organizations