Note: The job is a remote job and is open to candidates in USA. Valon is building an AI-native operating system for regulated finance, starting with mortgage servicing. The Senior Security Engineer, Threat & Offensive Security will scale and strengthen offensive security and threat operations by identifying weaknesses, managing security testing and threat intelligence, supporting incident response, and embedding AI-enabled automation across security workflows.
Responsibilities
- Drive and conduct security testing and penetration tests across applications, infrastructure, and networks to identify exploitable vulnerabilities
- Manage and implement security testing tools and frameworks to simulate real-world attacks and validate the effectiveness of existing security controls
- Design and implement AI-enabled workflows to scale security testing and threat related operations
- Manage and operationalize threat intelligence to anticipate emerging threats and adjust defenses proactively
- Partner with external pentesting firms for periodic, independent reviews
- Perform security reviews of new systems, features, architectures, and third-party integrations, providing actionable risk-based recommendations
- Collaborate with Engineering, IT, Product and other teams to remediate identified vulnerabilities and strengthen security controls
- Develop and refine playbooks, procedures, and standards for offensive security testing, threat monitoring, and incident response
- Monitor and manage security alerts and incidents, analyze data, and respond to security events
- Support operational activities including general security reviews, security monitoring, vendor security, issue remediation, security awareness, audit/compliance, and other processes
Skills
- • Proven experience in security engineering, red team, or threat management role, with a focus on penetration testing, security testing, threat intelligence, and/or incident response
- • Hands-on experience with security testing tools and frameworks (e.g., Burp Suite, Metasploit, Nmap, Cobalt Strike, or similar)
- • Demonstrated experience leveraging AI and automation to improve the efficiency and scalability of threat detection, testing, and response operations
- • Proficient in both manual and automated testing techniques, understanding when manual analysis is needed versus pure automated testing
- • Strong understanding of common attack techniques, exploitation methods, and MITRE ATT&CK or related
- • Experience with SIEM, EDR, and other detection/monitoring platforms
- • Experience with cloud security and environments (GCP, AWS)
- • Ability to work autonomously, lead projects, and navigate complex, ambiguous security investigations
- • Ability to foster strong relationships and partner with stakeholders to drive remediation and results
- • Excellent communication and collaboration skills, with the ability to explain technical findings and risk to both technical and non-technical stakeholders
- • Applied knowledge of industry security and testing frameworks (OWASP, NIST, MITRE ATT&CK, CIS, SOC 2/ISO 27001 concepts)
- • Minimum of 5 years in a security engineering, penetration testing, threat intelligence, or similar roles with relevant responsibilities and background
- • Bachelor's degree in Computer Science, Information Security, Technology, or a related field
- • Relevant security certifications (e.g., CISSP, CEH, OSCP, GPEN, GCIH or similar)
- • Knowledge of cloud environments
- • Experience with security testing, monitoring, and response technologies (threat intelligence platforms, vulnerability scanners, SIEM, EDR, or similar)
- • Experience or exposure to startup environments is a plus
Benefits
- Valon offices are located in New York City and San Francisco, but we fully support remote work!
- Meaningful stake in the company via equity
- 401k plan
- Comprehensive medical, dental, & vision benefits
- Pre-tax deductions for public transportation, rideshare services, and parking expenses
- Company wide orientation for you to successfully onboard
- Other learning & development opportunities including regular review cycles that feature 360 degree feedback
- Quarterly budgets for team and company outings. Use it for team swag, cooking classes, or team dinners!
- Flexible paid time off, sick days, and 11 company holidays
- 12 weeks off for both birthing and non-birthing parents - fully paid
Company Overview
Company H1B Sponsorship