Offensive Security Engineer

Freddie Mac

. Execute sophisticated red team assessments across diverse attack surfaces .

Posted 10/23/2026full-timeRemote • United StatesMid-LevelSenior💰 $150,000 - $224,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in executing red team assessments and translating technical findings into business risk narratives. Proficient in developing offensive security tools and automation frameworks while championing secure engineering practices.

Highest-signal resume keywords

Red Team AssessmentsOffensive Security Tools DevelopmentVulnerability Identification and RemediationAutomation Workflows CreationAI-Powered Security Tools Design

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentExploit DevelopmentSecurity Tool AutomationCloud SecurityWeb Application SecurityAI Security SystemsDefensive Control BypassingRisk AnalysisSecurity Framework ImplementationTechnical Findings Translation

Industry Keywords

Offensive SecurityRed TeamingCybersecurityEnterprise EnvironmentsSecure Engineering PracticesAttack SurfaceBusiness Risk NarrativesStakeholder EngagementAutomation FrameworksPublic Disclosures

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Execute sophisticated red team assessments across diverse attack surfaces
Partner with internal stakeholders to define engagement scope and success criteria
Translate complex technical findings into actionable business risk narratives
Research, develop, and maintain offensive security tools and automation frameworks
Design and implement AI-powered security tools
Proactively address vulnerabilities
Champion secure engineering practices across the organization
Continuously test organizational defenses by simulating attacker objectives and actions

Requirements

What you’ll need

Knowledge in one or more domains, including web applications, AI-powered business systems, and cloud environments
Proven ability to critically examine applications and identify, exploit, and remediate complex vulnerabilities
Proven ability to create automation workflows that scale to enterprise environments
Demonstrated expertise in bypassing modern defensive controls and security measures to achieve assessment objectives
Demonstrated proficiency in a chosen domain using public research, personal blog, active projects, bug bounty, and public disclosures
Willingness to work east coast hours

Benefits

Comp & perks

Eligible to participate in the annual incentive program
Comprehensive total rewards package
Competitive compensation
Market-leading benefit programs
Reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment