Senior Security Engineer
Remote in Argentina, & 4 others
Security.Development& 9 others
Looking for something else?
Find a vacancy that works for you. Send us your CV to receive a personalized offer.
Find me a jobChoose an option
We are seeking a Senior Security Engineer who is not just a pentester but a developer at heart, capable of orchestrating, scripting, and chaining network and web application exploits so they run autonomously and at scale.
Responsibilities
- Sequence vulnerabilities together to escalate impact, such as pairing low-severity information disclosure with SSRF to achieve Remote Code Execution
- Develop custom exploits and automate complex multi-stage authentication flows
- Configure and scale continuous, automated security validation tools to support ongoing vulnerability management
- Apply knowledge of the OSI model and core network protocols to assess infrastructure security
- Identify and validate web application vulnerabilities, including OWASP Top 10 issues and API flaws like IDOR
- Engineer automated exploit scripts that safely validate vulnerabilities without crashing live network infrastructure or corrupting production databases
- Perform threat modeling to anticipate attack paths and prioritize remediation efforts
- Leverage cyber threat intelligence to inform exploit development and validation strategies
Requirements
- 3+ years of experience in security engineering or offensive security roles
- Expertise in cyber threat intelligence, threat modeling, and vulnerability management
- Proficiency in Python for scripting and automating exploit chains
- Knowledge of OWASP Top 10 vulnerabilities and web application security flaws
- Background in configuring and scaling automated security validation frameworks such as Pentera, Cymulate, Picus, or custom Pentest Robots architectures
- Understanding of the OSI model and core network protocols, including DNS, BGP, and TCP/IP
- Showcase of experience engineering exploit scripts that safely validate vulnerabilities in production environments without causing disruption
- English proficiency at B2 level or higher
Nice to have
- Flexibility to use Bash and Go for scripting and automation tasks
- Familiarity with Multi-Factor Authentication mechanisms and programmatic handling of TOTP
- Competency in OAuth protocols for automating authentication flows
