Senior Security Engineer, Threat & Offensive Security
Valon Tech2 months ago
Base Salary
$180k - $230k/yr
Responsibilities
- Conduct security testing and penetration tests across applications, infrastructure, and networks.
- Manage security testing tools and frameworks to simulate attacks and validate security controls.
- Design and implement AI-enabled workflows for security testing and threat operations.
- Operationalize threat intelligence and adjust defenses in response to emerging threats.
- Partner with external penetration-testing firms on independent security reviews.
- Perform security reviews of systems, features, architectures, and third-party integrations.
- Collaborate with Engineering, IT, Product, and other teams to remediate vulnerabilities and strengthen controls.
- Develop playbooks, procedures, and standards for offensive security, threat monitoring, and incident response.
- Monitor security alerts and incidents, analyze data, and respond to security events.
- Support security reviews, monitoring, vendor security, issue remediation, security awareness, audit, and compliance activities.
Requirements
- At least 5 years of experience in security engineering, penetration testing, threat intelligence, or similar roles.
- Bachelor’s degree in Computer Science, Information Security, Technology, or a related field.
- Relevant security certification such as CISSP, CEH, OSCP, GPEN, or GCIH.
- Hands-on experience with security testing tools and frameworks such as Burp Suite, Metasploit, Nmap, or Cobalt Strike.
- Experience using AI and automation to scale threat detection, testing, and response operations.
- Proficiency in manual and automated security testing techniques.
- Strong knowledge of attack techniques, exploitation methods, and MITRE ATT&CK or related frameworks.
- Experience with SIEM, EDR, threat intelligence, vulnerability scanning, and other detection or monitoring technologies.
- Experience with cloud environments, including GCP and AWS.
- Ability to work autonomously, lead projects, and handle complex security investigations.
- Strong stakeholder relationship-building, communication, and collaboration skills.
- Applied knowledge of OWASP, NIST, MITRE ATT&CK, CIS, SOC 2, and ISO 27001 concepts.
- Startup experience is a plus.
Benefits
- Competitive salary, company equity, and a 401(k) plan.
- Comprehensive medical, dental, and vision benefits.
- Daily lunch and dinner for in-office team members.
- Pre-tax commuter benefits for public transit, rideshares, and parking.
- Company orientation, learning and development opportunities, and regular 360-degree review cycles.
- Quarterly budgets for team and company outings.
- Flexible paid time off with no annual limit, sick days, and 11 company holidays.
- 12 weeks of fully paid baby-bonding leave for birthing and non-birthing parents.
- Fully remote work is supported; offices are located in New York City and San Francisco.
Tech Stack
Categories
About Valon Tech
Valon builds an AI-native operating system for mortgage servicing that unifies workflows, data, and money movement in a single system of record. It sells software to mortgage servicers and regulated financial institutions to manage compliant servicing and customer communications at scale. Founded in 2019 and headquartered in New York City, the platform has over $100 billion in mortgages on it.