Offensive Security Engineer (Red Team)

About PlexTrac PlexTrac is a cybersecurity SaaS platform helping security teams streamline reporting, exposure management, and remediation workflows. Our platform is used by penetration testers, red teams, consultants, enterprises, and managed security providers to operationalize security findings and improve collaboration across technical and executive stakeholders. We are a remote-first company headquartered in the United States with distributed team members across North America, Europe, and Asia. We are committed to ownership, transparency, practical problem-solving, and building products that customers genuinely rely on. Why This Role Matters We build security software that helps companies protect their data. To make our product stronger, we are looking for Offensive Security Engineers (Red Team) who think like attackers. You will find weaknesses before the bad guys do, report what you find clearly, and work with our engineering team to fix it. This is a hands-on role with real influence on how we build and ship securely. Location: Remote — India only. Responsibilities Plan and execute red team engagements across our cloud infrastructure (AWS/GCP/Azure), internal networks, web applications, and SaaS product Simulate realistic attack chains — from initial access through lateral movement, credential harvesting, privilege escalation and data exfiltration — using current threat actor techniques Conduct assumed breach scenarios, purple team exercises, and objective-based engagements, not just point-in-time pen tests Assess cloud-specific attack surfaces: IAM roles and policies, storage misconfigurations, serverless functions, container workloads, and CI/CD pipelines Test Active Directory and hybrid identity environments for common and advanced attack paths Perform web and API application testing against our core product, including authentication flaws, authorization bypasses, and business logic vulnerabilities Build, customize, and maintain offensive tools, scripts, and C2 infrastructure to support engagements Develop and manage red team infrastructure — attack servers, redirectors, phishing platforms, and operational security controls Create and maintain repeatable testing methodologies and internal playbooks the team can use and build on Evaluate and improve detection coverage by working closely with our blue team — identify what's being caught, what isn't, and why Write detailed reports that document attack paths, evidence, business impact, and remediation steps — clearly enough that an engineer can act on them without follow-up questions Present findings to both technical teams and non-technical stakeholders, including leadership Track remediation progress and validate that fixes actually close the identified gaps — not just check a box Help define the scope, methodology, and maturity of our red team program as we scale Contribute to internal security standards, threat models, and secure design reviews Mentor junior team members and support knowledge sharing across the security org Qualifications 4+ years of hands-on experience in offensive security, penetration testing, or a red team role Demonstrated ability to attack and assess cloud environments — AWS, GCP, and Azure — including IAM abuse, privilege escalation, and misconfiguration exploitation Hands-on experience with container and Kubernetes security (EKS, GKE, AKS) Experience testing hosted and on-prem infrastructure: servers, VPNs, Active Directory, and internal networks Working knowledge of web application attack techniques (OWASP Top 10 and beyond) Familiarity with MITRE ATT&CK and how to map findings to real-world threat behavior Experience writing clear, well-organized findings reports for both technical and non-technical readers Ability to explain technical risk to people who are not security experts Comfort working independently and managing your own workload Nice to Have Experience testing SaaS products or multi-tenant cloud architectures Scripting or coding ability in Python, Bash, or PowerShell Familiarity with C2 frameworks such as Cobalt Strike, Brute Ratel, or Sliver Experience with phishing simulations and social engineering engagements Certifications such as OSCP, CRTO, CRTE, CPTS, or equivalent hands-on credentials Tech Stack Cloud and hosted environments, modern SaaS infrastructure, enterprise security controls, and offensive security tools for vulnerability testing and threat simulation. Work Style We operate as a remote-first, distributed team with a strong asynchronous culture. We value thoughtful communication, autonomy, and collaboration, with core working hours that partially overlap with U.S. Eastern Time. Employees are administered through our EOR partner: Remote. We’re committed to building an inclusive workplace where people from all backgrounds can thrive. We welcome applicants regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or background. If you require accommodations during the interview process, please let us know: [email protected] #LI-Remote