Staff Offensive Security Engineer
CloakedDigital Identity company
New York, United StatesLead
General Catalyst
Human Capital
Lux Capital
Liberty City Ventures
Marquee Ventures
LG Technology Ventures
Software Engineering
About the role
TL;DR
Act as a strategic adversary to compromise critical assets before real attackers do.
- •Cloaked is seeking a Staff Offensive Security Engineer to act as a persistent, advanced threat against their infrastructure.
- •This role focuses on custom exploit development, logical subversion, and strategic risk mapping, rather than automated reporting.
- •Key Responsibilities Design, dictate, and execute offensive security campaigns with absolute autonomy.
- •Engineer complex offensive systems and develop custom exploits beyond off-the-shelf tools.
- •Prioritize targets based on catastrophic business risk and map business logic to identify vulnerabilities.
- •Partner with product and engineering leaders to understand and weaponize business logic.
- •Educate engineering teams on attack paths and drive foundational system hardening.
- •Requirements Proven ability to build custom offensive tools and exploit complex logical flaws.
- •Deep understanding of modern cloud and SaaS architectures, including IAM and API misconfigurations.
- •Ability to translate complex exploits into actionable engineering requirements with strong communication skills.
- •Non-linear background with experience across various tech stack angles is valued.
Required skills
Penetration TestingIAMOWASPPythonJavaScriptTypeScriptBashDockerKubernetesCI/CDAWSGoogle CloudAzureVault
Domain expertise
cybersecurity
Benefits & perks
401K, Health Insurance, Dental Insurance, Vision Insurance, Flexible Work Arrangements, Remote Work, Home Office Stipend, Company Laptop, Competitive PTO, Monthly Health Stipend, Meal Stipend, Professional Development Fund
Tech stack
PythonJavaScriptTypeScriptGoRustBashNode.jsDjangoFlaskFastAPIExpressRuby on Rails.NETASP.NETNestJSLaravelSymfonyGinEchoActixPhoenixMicroservicesPostgreSQLMySQLMongoDBRedisElasticsearchDynamoDBCassandraSQLite