Offensive Security Engineer

LiveRamp

Market Research Companies

Little Rock, AR - USA

Senior Specialist / Project Manager

Experteer Overview

In this role, you proactively identify and remediate security weaknesses across LiveRamp’s SaaS platform, including web apps, APIs, and cloud-native infrastructure. You will collaborate with Engineering, DevOps/DevSecOps, and Product teams to ensure vulnerabilities are discovered, reproduced, and remediated with minimal production impact. You’ll lead offensive security initiatives, red/purple team activities, and help mature the company’s security posture in a multi-cloud environment. This is a hands-on role that blends proactive testing with risk-driven guidance to engineers.

Compensation / Benefits

Flexible paid time off
Remote work options
Medical/dental/vision/life benefits
401K matching up to 6%
Employee Stock Purchase Plan (15% discount)
RampRemote equipment and ergonomic support

Responsibilities

Conduct authorized pentests on web apps, APIs, cloud infrastructure, and microservices
Identify vulnerability classes and provide actionable remediation guidance to engineering teams
Contribute to threat modeling and design reviews; maintain and update the internal pentest framework
Collaborate with Cloud/DevOps to secure CI/CD pipelines and containerized/serverless workloads
Research emerging exploits relevant to multi-cloud and microservice architectures
Scope and execute red team exercises; run purple team engagements with defenders
Provide reproduction steps and risk context to engineering; support security design discussions
Develop automation for secure testing workflows; create PoC tooling as needed
Document vulnerability assessments, retesting, and mitigation in ITSM; support security questionnaires

Key requirements

Bachelor’s degree in a relevant technical field or equivalent experience
Offensive Security Certification: OSCP, OSEP, or OSWE or GIAC GXPN (required)
5–10+ years in Offensive Security and Cloud Security
Strong knowledge of OWASP Top 10 (including API) and secure coding flaws
Proficiency with offensive security tools (e.g., Burp Suite, Metasploit, BloodHound) and vulnerability scanning
Experience testing in multi-cloud (AWS/GCP/Azure) and containerized environments
Ability to write PoCs and scripts in Python, Bash, or Go
Experience mentoring junior staff and communicating findings to engineering teams
Proven ability to produce actionable reports linking findings to business risk

Mentoring/mentorship Clear communication of complex security issues to non-security audiences Collaborative cross-functional teamwork Cloud security (AWS/GCP/Azure)CI/CD security integration (SAST/DAST)Threat modeling and design reviews

Description

In this role, you proactively identify and remediate security weaknesses across LiveRamp’s SaaS platform, including web apps, APIs, and clou…

Weltweit über 1 Mio. Spitzenpositionen mit Gehaltsbenchmark
Lassen Sie sich diskret von Headhuntern finden und kontaktieren
Exklusiv für Senior Professionals und Executives

Bereits Mitglied?

Experteer Gehaltsbenchmark: