Offensive Security Engineer

Freddie Mac

. Execute sophisticated red team assessments across diverse attack surfaces .

Posted 10/24/2026full-timeMcLean • Virginia • United StatesMid-LevelSenior💰 $150,000 - $224,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in executing red team assessments and developing AI-powered security tools while effectively translating technical findings into business risk narratives. Proficient in identifying and remediating vulnerabilities across diverse environments, including web applications and cloud systems.

Highest-signal resume keywords

Red Team AssessmentsOffensive Security Tools DevelopmentVulnerability RemediationAutomation Workflows CreationAI-Powered Security Tools Design

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability IdentificationComplex Vulnerability ExploitationSecurity Measures BypassingTechnical Findings TranslationEngagement Scope Definition

Soft Skills

Collaboration with StakeholdersCritical Examination Skills

Tools & Technologies

Automation FrameworksAI-Powered Tools

Industry Keywords

Web ApplicationsCloud EnvironmentsSecure Engineering PracticesOffensive Security

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Execute sophisticated red team assessments across diverse attack surfaces
Partner with internal stakeholders to define engagement scope and success criteria
Translate complex technical findings into actionable business risk narratives
Research, develop, and maintain offensive security tools and automation frameworks
Design and implement AI-powered security tools
Proactively address vulnerabilities
Champion secure engineering practices across the organization
Continuously test organizational defenses by simulating attacker objectives and actions

Requirements

What you’ll need

Knowledge in one or more domains, including web applications, AI-powered business systems, and cloud environments
Ability to critically examine applications and identify, exploit, and remediate complex vulnerabilities
Ability to create automation workflows that scale to enterprise environments
Expertise in bypassing modern defensive controls and security measures
Demonstrated proficiency in a chosen domain through public research, personal blog, active projects, bug bounty, or public disclosures
Willingness to work East Coast hours

Benefits

Comp & perks

Comprehensive total rewards package
Market-leading benefit programs
Annual incentive program
Reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment