Senior Penetration Tester (AWS)
Offchain · Remote
Extracted from the posting
Senior Security Engineer role focused on offensive security: hands-on penetration tests of AWS cloud, infrastructure, and backend apps, plus code audits and red team exercises. Works with detection engineering, threat intel, and incident response teams, and builds custom offensive tools and automation in Python, Go, or similar. Offchain builds the Arbitrum stack for Ethereum scaling, and the role supports SOC 2 compliance.
At Offchain, we aren’t just building products: we’re leading a movement.
As pioneers in blockchain scalability and security, we're at the forefront of transforming how the world interacts with decentralized applications. We're laying the foundation that will define the next generation of digital commerce, governance, and human interaction. This involves tackling real-world challenges that come with scaling blockchain technology, without compromising on its core principles: decentralization, security and transparency.
At the center of this vision is our people. Our team is made up of thinkers and doers that embrace new challenges and seek solutions that push existing boundaries. If you’re energized by solving unprecedented problems, and believe in the role that decentralized systems will play in creating a more equitable digital future, then we want to hear from you.
Why Offchain?
Offchain is setting the pace for the entire Ethereum ecosystem. We built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution that exists today.
Arbitrum’s ecosystem is undergoing tremendous growth with hundreds of projects and dApps on Arbitrum One today. Over 100 different teams have used Offchain technology to build their own Arbitrum chains. Major players in the space, Robinhood, BlackRock, Ethena Labs, Securitize, Aave, and Apechain are all using the Arbitrum stack.
Arbitrum’s thriving ecosystem wouldn’t exist without our advanced technology stack. Arbitrum, Prysm, ZeroDev. These aren’t just product names. These are tools that are actively reshaping what's possible on Ethereum and advancing its core infrastructure.
To top it all off? We’re backed by $124 million in funding. We’ve demonstrated consistent execution with billions in secured value, thousands of supported projects, and infrastructure processing millions of transactions seamlessly.
The Role
What you'll do:
- Conduct comprehensive code audits across a variety of internal applications and infrastructure.
- Conduct comprehensive penetration tests across cloud environments (AWS), infrastructure, and backend applications.
- Collaborate with detection engineering, threat intelligence, and incident response groups to review security controls, uncover coverage gaps, and enhance overall detection quality.
- Build, maintain, and evolve custom offensive tools, scripts, and automation frameworks to increase assessment speed.
- Offer offensive security expertise during incident investigations, including log analysis and root cause reviews.
- Keep up with evolving threats, vulnerabilities, and attack methods; share research internally and engage with the wider security community.
- Own offensive security projects from start to finish, mentor junior team members, and cultivate a culture of ongoing learning and knowledge exchange.
What you'll need:
Nice-to-haves
Perks:
- Remote-first global workforce + NY office
- Professional reimbursement program (facilitates industry conference attendance, certifications, and more)
- Medical, dental & vision coverage (US + some other countries)
- 401k retirement plan + company match (US only)
- Wellness stipend
- Home office set up / ergonomic equipment program
