资深进攻性安全工程师
Staff Offensive Security Engineer
Greenlight 是一家家庭科技公司，致力于帮助家庭培养财务智慧的孩子，并共同应对生活挑战。其产品组合包括 Greenlight 应用、借记卡、Safe Family GPS 追踪器和 Family Hub，将金融工具、安全功能和日常家庭管理整合到一个互联的体验中。专为希望在不妥协的情况下获得便利的忙碌家庭而设计，Greenlight 持续创新，以适应现代生活的不断变化。如今，超过 650 万名家庭成员信任 Greenlight 来保持同步。
在 Greenlight，我们致力于让日常更轻松，未来更光明，这样家庭就能花更少时间管理生活，更多时间享受生活。这就是我们每天早上起床的原因。
Greenlight 正在寻找一名高级进攻性安全工程师加入我们的安全团队。该职位将负责对我们的消费者数字平台、移动应用、云基础设施、内部企业环境和新兴硬件设备线进行持续的进攻性安全验证。高级进攻性安全工程师将推动进攻性安全的长期技术战略，领导复杂的红队演练和多阶段对手模拟，深入研究高风险区域的漏洞，推动研发组织中的安全意识文化，并在金融科技环境中建立自动化安全防护和自愈基础设施。
你的日常工作：
制定技术战略：定义 Greenlight 进攻性安全的长期愿景，超越一次性测试，实现持续的安全验证。
红队演练与对手模拟：设计并执行针对我们的云基础设施（AWS）、移动应用（iOS/Android）和内部企业环境的复杂多阶段对手模拟。
漏洞研究：深入研究我们生态系统中的高风险区域，识别自动化工具无法发现的零日漏洞或复杂的逻辑缺陷。
铺就“黄金路径”：与 DevOps 和工程团队合作，构建自动化安全防护和“自愈”基础设施，防止常见攻击向量被引入。
事件响应支持：与检测与响应团队密切合作，通过“紫队”演练提升我们的监控能力，验证警报覆盖范围。
指导与辅导：作为增效力量，通过分享知识和经验，提升整个团队的安全意识和技术水平。
查看英文原文
Greenlight is a family technology company on a mission to help families raise financially smart kids and navigate life together. Its suite of products — including the Greenlight app, debit card, Safe Family GPS trackers, and Family Hub — brings together financial tools, safety features, and everyday family management in one connected experience. Designed for busy families who want convenience without compromise, Greenlight continues to innovate alongside the evolving needs of modern life. Today, more than 6.5 million family members trust Greenlight to stay in sync.
At Greenlight, we're here to make the day-to-day easier and futures brighter, so families can spend less time managing life, and more time living it. That's why we get out of bed every morning.
Greenlight is looking for a Staff Offensive Security Engineer for our Security team. This individual will be responsible for the continuous offensive security validation across our consumer digital platforms, mobile applications, cloud infrastructure, internal corporate environments, and emerging hardware device lines. The Staff Offensive Security Engineer will drive the long-term technical strategy for offensive security, lead complex red teaming and multi-stage adversary simulations, manage deep-dive vulnerability research into high-risk areas, champion a culture of security-minded development across the R&D organization, and establish automated security guardrails and self-healing infrastructure within a fintech environment.
Your day-to-day:
Lead Technical Strategy: Define the long-term vision for offensive security at Greenlight, moving beyond point-in-time testing to continuous security validation.
Red Teaming & Adversary Simulation: Design and execute complex, multi-stage adversary simulations targeting our cloud infrastructure (AWS), mobile applications (iOS/Android), and internal corporate environments.
Vulnerability Research: Conduct deep-dive research into high-risk areas of our ecosystem, identifying zero-day vulnerabilities or sophisticated logic flaws that automated tools miss.
Pave the "Golden Path": Partner with DevOps and Engineering to build automated security guardrails and "self-healing" infrastructure that prevents common attack vectors from being introduced.
Incident Response Support: Work closely with the Detection and Response team to improve our monitoring capabilities by performing "purple team" exercises to validate alert coverage.
Mentorship: Act as a force multiplier by mentoring senior and mid-level engineers, fostering a culture of security-minded development across the entire R&D organization.
What you’ll bring to the team:
Expert-level Offensive Skills: 8+ years of experience in offensive security, red teaming, or penetration testing, with a proven track record of uncovering critical vulnerabilities in complex environments.
Cloud Native Expertise: Deep understanding of AWS security architecture, including IAM bypass techniques, container escapes (Kubernetes), and serverless security.
Application Security Depth: Experience with manual code review (Node.js, Python, or Go) and bypass techniques for modern web and mobile security controls.
Automation Mindset: Ability to script in Python, Bash, or Go to automate exploitation chains or integrate security testing into CI/CD pipelines.
Strategic Communication: The ability to translate complex technical risks into business impact for executive stakeholders while remaining a trusted peer to software engineers.
Relevant Certifications (Optional but valued): OSCP/OSCE, GXPN, or equivalent demonstration of deep technical skill.
An Ethical Hacker at Heart: You are curious, persistent, and think outside the box to find ways around traditional security controls.
A Collaborative Partner: You believe that "breaking things" is only half the job; the real value is in helping the team build them back stronger.
Owner Mindset: You take pride in your work and feel a deep sense of responsibility for the safety of our families and their finances.
Not sure this one’s for you? Don’t count yourself out. Show us what you’ve got and we’ll reach out if there’s a great fit.
Work perks at Greenlight:
Medical, dental, vision, and HSA match
Paid life insurance, AD&D, and disability benefits
Traditional 401k with company match
Unlimited PTO
Paid company holidays and pop-up bonus holidays
Professional development stipend
Mental health resources
1:1 financial planners
Fertility healthcare
100% paid parental and caregiving leave, plus cleaning service and meals during your leave
Flexible WFH, both remote and in-office opportunities
Fully stocked kitchen, catered lunches, and occasional in-office happy hours
Employee resource groups
Our stance on salaries:
Greenlight provides a competitive compensation package with a market-based approach to pay and will vary depending on your location, experience and skill set. The total compensation package for this position will also include a discretionary performance bonus, equity rewards, medical benefits, 401K match, and more. Greenlight conducts continuous compensation evaluations across departments and geographies to ensure we are keeping our pay current and competitive.
The estimated base pay range for this position in (NY, CA, WA): $165,000-200,000
The estimated base pay range for this position in (CO): $165,000-185,000
Who we are:
It takes a talented team to aim for a mission like ours. We're looking for people who ask "is it bold enough?" People who bring their real selves to the table and push the people around them to do the same. We win by never hesitating to jump in, offer a hand, or share the credit, because we know we're stronger together than apart. And through all of it, the mission stays the thing we measure ourselves against: are we doing right by the families counting on us? If that sounds like your kind of team, we'd love for you to apply.
Greenlight is an equal opportunity employer and will not discriminate against any employee or applicant based on age, race, color, national origin, gender, gender identity or expression, sexual orientation, religion, physical or mental disability, medical condition (including pregnancy, childbirth, or a medical condition related to pregnancy or childbirth), genetic information, marital status, veteran status, or any other characteristic protected by federal, state or local law.
Greenlight is committed to an inclusive work environment and interview experience. If you require reasonable accommodations to participate in our hiring process, please reach out to your recruiter directly or email accomodations@greenlight.me.