Senior Offensive Security Engineer

Location: United States, Remote

Department: DevSecOps

Are you an experienced Senior Offensive Security Engineer that wants to work with cutting-edge cybersecurity technologies and contribute to enhancing our overall security posture? At Ivanti, we work passionately and authentically, striving to win together and make a real impact for our customers and each other. Join us to elevate your career and help deliver innovative solutions in a dynamic, empowering environment. 

Why this role matters

As a Senior Offensive Security Engineer, you will play a crucial role in assessing the security of applications, networks, and systems by simulating cyberattacks. Ivanti's Security Department is responsible for implementing and maintaining organization-wide information security policies, standards, guidelines, and procedures. The teams ultimate goal is to keep Ivanti, our data, our customers and employees safe, and the Senior Offensive Security Engineer, is responsible for evaluating the security of applications, networks, and systems by simulating cyberattacks.

What you’ll do:

• Assess security of applications, networks, and systems by simulating cyberattacks.
• Manage disclosure programs and collaborate with internal teams to prioritize and resolve vulnerabilities, and conduct penetration tests.
• Establish and maintain communication channels with the security research community to promote awareness of the responsible disclosure program and encourage participation. 
• Receive and triage vulnerability reports submitted by external researchers through various channels, such as email, web form, or bug bounty platform. 
• Collaborate with internal security teams to assess the severity and impact of reported vulnerabilities and prioritize them for resolution based on risk. 
• Facilitate communication and collaboration between researchers and relevant stakeholders, including development teams, IT operations, and product managers, to ensure timely resolution of identified security issues. 
• Track the progress of vulnerability remediation efforts and ensure that issues are addressed within agreed-upon timelines. 

What you will bring:

• 5 years of experience in cybersecurity, with a focus on penetration testing and vulnerability assessment. 
• Responsible Disclosure Program (VDP) and Bugbounty program management 
• CEH, Offensive Security Certified Professional (OSCP), or other relevant certifications. 
• Strong understanding of networking protocols, operating systems, and web applications. 
• Proficiency in using penetration testing tools such as Metasploit, Nmap, Burp Suite, etc. 
• Knowledge of common cybersecurity threats and attack vectors. 

Why Ivanti?

• Friendly flexible working model: Empower excellence whether you’re at home or in the office and support work-life balance.
• Competitive compensation & total rewards: Including health, wellness, and financial plans tailored for you and your family.
• Global, diverse teams: Collaborate with talented people from 23+ countries.
• Learning & development: Grow your skills with access to best-in-class learning tools and programs.
• Equity & belonging: We value every voice. Your story helps inform our solutions for a changing world.

What drives us

Ivanti’s mission is to elevate human potential within organizations by managing, protecting and automating technology for continuous innovation.

It is through diverse and inclusive hiring, decision-making, and commitment to our employees and partners that we will continue to build and deliver world-class solutions for our customers.

To learn more about Ivanti’s Mission and Core Values. 

Inclusion at Ivanti

Ivanti is proud to be an Equal Opportunity Employer. We’re committed to building a diverse team and fostering an inclusive environment where everyone belongs. We welcome applicants from all backgrounds and walks of life.

Need adjustments during the process? Reach out to talent@ivanti.com we’re happy to help.

#LI-SM1