Note: The job is a remote job and is open to candidates in USA. Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. The Senior Offensive Security Engineer serves as a technical subject matter expert on an offensive security team, leading penetration testing, web application testing, and Red Team operations across enterprise systems, applications, cloud infrastructure, and networks. The role also provides technical leadership, develops custom tooling and automation, mentors team members, and communicates findings and remediation recommendations to stakeholders.
Responsibilities
- Serves as a senior leader on an offensive security team providing technical expertise across penetration testing, web application testing, and Red Team operations, ensuring a high standard for depth and quality of testing occurs
- Help lead the offensive security team: planning and resourcing engagements, reviewing peer findings, and providing hands on technical mentorship to junior and mid-level penetration testers
- Perform time based penetration tests against web applications, APIs, databases, network devices, operating systems, cloud environments, and infrastructure
- Perform advanced manual web application testing against modern frameworks and APIs, going well beyond OWASP Top 10 to identify complex, business logic, and chained vulnerabilities
- Lead and support advanced Red Team operations, including threat modeling, initial access, command and control (C2), post exploitation, lateral movement, and EDR evasion
- Design and build custom tools, scripts, exploits, and automation to expand and mature the Offensive Security Team's capabilities
- Integrate AI assisted tooling and automation into penetration testing and application security workflows to increase speed, coverage, and consistency
- Review newly published vulnerabilities and develop impact assessments and detection/exploitation guidance for customer environments
- Analyze vulnerabilities and determine associated risk based on exploitability and operational impact
- Author clear, concise, and actionable reports; present findings, metrics, and remediation recommendations to customers, system owners, and executive stakeholders
- Define and evolve testing methodologies, operational procedures, and reporting standards for the team
- Maintain offensive security infrastructure, hardware, and software used for assessments and attack simulations
- Support assessments that may require work outside standard business hour
Skills
- + 6+ years of overall experience in cybersecurity or IT, with 5+ years dedicated to offensive security or penetration testing
- + Demonstrated experience leading engagements and mentoring or developing other testers
- + At least one industry recognized offensive security certification (e.g., OSCP or higher)
- + Ability to obtain and maintain required federal clearance / public trust as needed
- + Proven, hands on experience conducting penetration tests using industry standard offensive security tools across Windows, Unix, and Linux
- + Deep expertise in identifying, validating, and exploiting web application vulnerabilities, including complex and business logic flaws
- + Experience assessing cloud infrastructure and internal networks, including Active Directory attack paths
- + Experience developing custom tools, scripts, or exploits to enhance offensive security operations
- + Experience with Red Team TTPs, including C2, post exploitation, and EDR evasion
- + Strong scripting and automation skills in Bash, PowerShell, Python, or similar languages
- + Experience applying AI assisted tools or automation to penetration testing and vulnerability analysis
- + Ability to communicate technical findings clearly through written reports and customer/executive briefings
- + Strong analytical and problem solving skills with an adversarial mindset
- + Technical leadership: the ability to set direction, review others' work, and raise the team's tradecraft
- + Strong ownership mindset and accountability for outcomes
- + Effective written and verbal communication skills
- + Ability to operate in fast paced and mission focused environments
- + Strong collaboration and teamwork skills
- + Web application specialization: GIAC Web Application Penetration Tester (GWAPT)
- + Advanced offensive certifications such as OSCE³ (OSEP + OSWE + OSED), OSEP, OSWE, or OSED
- + Red Team leadership: Certified Red Team Operator (CRTO / CRTO II) or equivalent
- + Experience applying AI/LLM assisted tooling, automation frameworks, or scripted solutions to enhance penetration testing and vulnerability analysis
- + Experience with advanced Red Team operations including reverse engineering, malware development, C2, and EDR evasion
- + Experience supporting federal government cybersecurity programs
- + Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (5 years of additional relevant experience may substitute for education)
Benefits
- Traditional and HSA- eligible medical insurance plans
- 100% employer-paid dental and vision insurance options
- 100% employer-sponsored STD, LTD, and life insurance
- 5% 401(k) company matching
- Flexible-schedules and teleworking options
- Paid holidays and PTO Accrual Plans
- Paid Parental Leave
- Professional development and career growth opportunities
- Team and company-wide events, recognition, and appreciation-- and so much more!
Company Overview