Senior/Staff Security Engineer, Offensive Security

Are you prepared to join the X team and help build the ultimate real-time information-sharing app, revolutionizing how people connect? At X, we’re on a mission to become the trusted global digital public square, committed to protecting freedom of speech and building the future unlimited interactivity. Our goal is to empower every user to freely create and share ideas, fostering open public discourse without barriers. Join us in shaping this thrilling journey where your contribution will be invaluable to our success!

_

Who We Are:

X serves our community of users and customers by working tirelessly to preserve free expression and choice, create limitless interactivity, and create a marketplace that enables the economic success of all its participants.

What You’ll Do:

You will be responsible for helping maintain the security of X’s networks, products, offices, and data centers. You will help identify and manage risks and work with partner teams to reduce and manage them. You will secure, advocate, and help build secure-by-default systems and infrastructure that close off entire classes of security problems.

As a security engineer, you will:

• Scope prospective engagements, leading engagements from kickoff through remediation.

• Perform network, web, and mobile application testing, source code reviews, threat analysis and wireless network assessments.

• Operate and maintain the vulnerability scanners.

• Lead and participate in red team exercises to emulate adversarial activity.

• Recognize and safely utilize attacker tools, tactics, and procedures.

• Develop scripts, tools, or methodologies to enhance offensive security processes.

• Drive security directions and solutions in collaboration with other teams.

• Use data to drive identification of risk areas and solutions.

Who You Are:

You care about security and building a secure environment for the people using X everyday. You are curious, comfortable digging into the details, have experience with the tools of the trade, and are eager to help others protect our systems. Ideally, you have many of the following (but need not have all):

• 5 or more years of experience in network penetration testing, mobile and web app assessments, shell scripting and exploit development.

• Knowledge of tools used for wireless, web application, and network security testing.

• Experience reviewing web and mobile application source code for security issues.

• Tested security of cloud security infrastructure including applications deployed on cloud.

• Deep understanding of Linux/Mac/Windows operating systems, including bash and powershell. 

• Knowledge of at least one of the following languages: Scala (preferred), Go, Python, or Java.