Senior Security Engineer, Threat & Offensive Security
Valon Tech · Remote · New York · San Francisco ·
COMPENSATION
$180k – $230k
Listed on the employer's job board (Ashby)
- Senior Security Engineer
- Fully remote (US)
- Offensive Security focus
- AI-driven security tools
- Equity + 401(k)
Join Valon's Security team to protect the infrastructure processing billions in mortgage loans. You will scale offensive security capabilities, conduct penetration tests, and integrate AI-driven automation into threat detection and response processes.
The team partners with Engineering and Product to embed security into ValonOS, ensuring safe and scalable financial operations. This position supports remote work while maintaining high standards for data protection and compliance.
What you'll do
- Conduct penetration tests on applications, infrastructure, and networks
- Implement security tools to simulate attacks and validate controls
- Design AI-enabled workflows to scale testing and threat operations
- Operationalize threat intelligence to anticipate emerging risks
- Partner with external firms for independent security reviews
- Review new systems and integrations for security risks
- Collaborate with teams to remediate vulnerabilities
- Develop playbooks for offensive testing and incident response
- Monitor alerts and respond to security incidents
What you'll need
- At least 5 years in security engineering or penetration testing
- Bachelor's degree in Computer Science or related field
- Hold relevant certifications like CISSP, OSCP, or CEH
- Experience with cloud environments such as AWS or GCP
- Proficient with SIEM, EDR, and vulnerability scanners
- Knowledge of OWASP, NIST, and MITRE ATT&CK frameworks
- Strong understanding of adversarial techniques and exploitation
- Ability to explain technical risks to non-technical stakeholders
Nice to have
- Experience in startup environments
- Background in red teaming or threat management
- Familiarity with Burp Suite, Metasploit, or Cobalt Strike
Stack
- AWS
- GCP
- Burp Suite
- Metasploit
- Nmap
- Cobalt Strike
- SIEM
- EDR
How you'll work
- Fully remote support
- Offices in NYC and San Francisco
- Flexible paid time off
- 11 company holidays
What you get
- Competitive salary and equity
- 401(k) plan
- Comprehensive medical, dental, and vision
- Daily lunch and dinner for in-office staff
- Commuter benefits for transit and parking
- Quarterly budgets for team outings
- 12 weeks paid parental leave
- Learning and development opportunities