Top 583 Attack penetration engineer Jobs

Cloud Penetration Tester
Black Hills Information Security —Remote
- $120,000 - $150,000 a year
- Full-time
- Remote
- Background check
- Mid-level
- 3 years
- Health insurance
- Dental insurance
Quick Apply
Security Engineer
Panopto —Remote
- $140,000 - $150,000 a year
- Remote
- Analysis skills
- Mentoring
- APIs
- Disability insurance
- Health insurance
Quick Apply
Penetration Tester
General Dynamics Information Technology —Remote
- $123,250 - $166,750 a year
- Remote
- Bachelor of Science
- 8 years
- Analysis skills
4d
AppSec Engineer
Karbon —Chicago, IL
- $131,000 - $169,000 a year
- Remote
- Azure
- System design
- Mid-level
- Paid parental leave
- Dental insurance
Quick Apply
Staff+ Application Security Engineer
Anthropic —Remote
- $320,000 - $485,000 a year
- Hybrid work
- System design
- Office
- Bachelor's degree
- Parental leave
- Flexible schedule
Sr Product Security Engineer
BeyondTrust —Remote
- Remote
- Research
- AWS
- APIs
Quick Apply
DevSecOps Engineer
BNY Mellon —Remote
- $58.40 - $73.00 an hour
- Contract
- Computer Science
- 3 years
- Java
- Health insurance
- Dental insurance
Red Team Engineer, Safeguards
Anthropic —Remote
- $320,000 - $405,000 a year
- Hybrid work
- Office
- Bachelor's degree
- Machine learning
- Parental leave
- Flexible schedule
4d
Staff Engineer - Offensive Security
Twilio —Remote
- $155,520 - $228,700 a year
- Remote
- Azure
- Research
- AWS
- Paid parental leave
- Health insurance
6d
Senior Penetration Tester
Agile Defense —Remote
- $115,000 - $150,000 a year
- Research
- Windows
- SQL
Quick Apply
Security Engineer
Handshake AI —Remote
- Part-time
- Remote
- Research
- Mid-level
- 3 years
Senior Penetration Testing Engineer
Snowflake —Menlo Park, CA
- $200,000 - $287,500 a year
- Azure
- 5 years
- Java
- Health savings account
- Paid holidays
Vulnerability Management Engineer
UChicago Medicine —Illinois
- Full-time
- Remote
- Computer science
- Computer Science
- Mid-level
6d
Cybersecurity Operations Engineer (mid-level)
Rapid Strategy —Remote
- $70,000 - $75,000 a year
- Full-time
- System design
- Mid-level
- Leadership
Quick Apply
Security Engineer
Walker & Dunlop —Remote
- $95,000 - $110,000 a year
- Full-time
- Remote
- Azure
- Mid-level
- 3 years
- Wellness program
- Commuter assistance
Senior Security Engineer
Karbon —Chicago, IL
- $131,000 - $169,000 a year
- Remote
- Azure
- System design
- AWS
- Paid parental leave
- Dental insurance
Quick Apply
Penetration Tester / Active Secret
Peraton —Arlington, VA
- $86,000 - $138,000 a year
- Azure
- Bachelor of Science
- AWS
- Health savings account
- Paid holidays
X-Day Offensive Research (XOR) Vulnerability Researcher
JPMorganChase —Jersey City, NJ
- $152,000 - $260,000 a year
- Full-time
- Computer science
- Computer Science
- 5 years
- Health insurance
- Tuition reimbursement
11d
Principal or Sr. Principal Systems Engineer
Northrop Grumman —Roy, UT
- $108,200 - $202,600 a year
- Overtime
- Computer science
- Computer Science
- Research
- Paid holidays
- Disability insurance
7d
Lead Security Engineer with TS/SCI Poly
Leidos —Annapolis Junction, MD
- $154,050 - $278,475 a year
- Full-time
- 5 years
- Master's degree
- Supervising experience
- Paid holidays
- Paid time off

I want to receive the latest job alert for attack penetration engineer

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Cloud Penetration Tester

Black Hills Information Security -
Remote

Quick Apply

Job Details

Full-time
$120,000 - $150,000 a year

Benefits

Health insurance
Dental insurance
401(k)
Paid time off
Parental leave
Employee assistance program
Vision insurance
Retirement plan

Qualifications

Cloud identity and access management (IAM)
Tooling
Project timeline management
Security system vulnerability testing
Network scanners
Terraform
Continuous integration
Nmap
Key management
Web Application Security Testing
Python
Vuls
Identity & access management
AWS CloudFormation

Full Job Description

About the Role

We're looking for a Cloud Penetration Tester to perform security assessments against modern cloud environments, including AWS, Microsoft Azure, Google Cloud Platform, and related SaaS/IaaS/PaaS technologies. The ideal candidate combines a strong foundation in traditional penetration testing with hands-on experience identifying, exploiting, and communicating cloud-specific security risks.

What You'll Do

Perform cloud-focused penetration tests against AWS, Azure, GCP, Microsoft 365, and cloud-connected environments
Assess cloud identity and access management configurations, including IAM roles, service accounts, managed identities, Entra ID, federated identity, and OAuth applications
Identify and exploit cloud misconfigurations, insecure permissions, exposed services, weak network controls, and insecure secrets management
Conduct traditional penetration testing: external/internal network testing, web application and API testing, password attacks, phishing simulation support, and post-exploitation activities
Evaluate cloud-native services including storage, serverless functions, containers, Kubernetes, CI/CD pipelines, and key management systems
Perform attack path analysis to demonstrate realistic business impact — privilege escalation, lateral movement, data access, and persistence
Write clear, accurate, and actionable reports with technical details, risk ratings, evidence, and remediation guidance
Present findings to technical teams and executive stakeholders
Stay current with emerging cloud attack techniques, offensive tooling, and cloud provider security features

Required Qualifications

3-5 years hands-on experience performing penetration tests, red team assessments, or offensive security testing
Strong understanding of penetration testing methodologies: reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, persistence, and reporting
Practical experience with at least one major cloud provider: AWS, Azure, or GCP
Understanding of cloud IAM concepts: users, groups, roles, policies, service principals, access keys, tokens, and privilege escalation paths
Experience with web application and API security testing, including OWASP Top 10
Familiarity with common offensive tools: Burp Suite, Nmap, Metasploit, Impacket, BloodHound, Responder, CrackMapExec/NetExec, and password auditing tools
Experience with cloud CLIs and scripting: AWS CLI, Azure CLI, Google Cloud CLI, PowerShell, Python, or Bash
Strong written and verbal communication skills
Ability to work independently and manage assessment timelines

Preferred Qualifications

Experience testing multiple cloud providers, especially AWS, Azure, GCP, and Microsoft 365
Knowledge of Entra ID, Microsoft Graph, OAuth abuse, conditional access, enterprise applications, device code authentication, and consent grant attacks
Experience with cloud privilege escalation, persistence, and post-exploitation techniques
Experience with container, Kubernetes, and CI/CD security testing
Familiarity with infrastructure as code: Terraform, CloudFormation, ARM/Bicep, or Kubernetes manifests
Experience reviewing cloud security posture against CIS Benchmarks, MITRE ATT&CK, or NIST frameworks
Experience developing custom tooling or automation in Python, PowerShell, Go, or Bash
Relevant certifications: OSCP, OSEP, CRTO, GWAPT, AWS Security Specialty, Azure Security Engineer, Google Professional Cloud Security Engineer, or equivalent practical experience
Experience writing technical blog posts, presenting research, contributing to tools, or developing security training content

You'll Thrive Here If You

Can independently assess a cloud environment and identify realistic attack paths
Can explain not just that a permission is dangerous — but how it could be abused and what impact it creates
Balance automated tooling with manual analysis
Write reports that are technically accurate, easy to understand, and useful to defenders
Think like an attacker but communicate like a trusted advisor

Pay: $120,000.00 - $150,000.00 per year

Benefits:

401(k)
Dental insurance
Employee assistance program
Health insurance
Paid time off
Parental leave
Retirement plan
Vision insurance

Application Question(s):

Are you willing to complete a background check?
How many years experience do you have with penetration testing?
How many years experience do you have with Cloud environment penetration testing?
Describe an instance where a tool you were using failed during a penetration test. How did you handle the failure?
Describe some similarities and differences in how you approach testing different cloud providers such as, AWS, Azure, and GCP for security issues.

Work Location: Remote

Quick Apply

Refine Your Search

attack penetration engineer jobs

Cloud Penetration Tester

Security Engineer

Penetration Tester

AppSec Engineer

Staff+ Application Security Engineer

Sr Product Security Engineer

DevSecOps Engineer

Red Team Engineer, Safeguards

Staff Engineer - Offensive Security

Senior Penetration Tester

Security Engineer

Senior Penetration Testing Engineer

Vulnerability Management Engineer

Cybersecurity Operations Engineer (mid-level)

Security Engineer

Senior Security Engineer

Penetration Tester / Active Secret

X-Day Offensive Research (XOR) Vulnerability Researcher

Principal or Sr. Principal Systems Engineer

Lead Security Engineer with TS/SCI Poly

I want to receive the latest job alert for attack penetration engineer

Related Searches

Explore jobs in more locations

Job Seeker Tools

Employer Tools

Browse

Stay Connected