Senior Offensive Security Engineer

About the role

JFrog is looking for a senior professional to lead its offensive security operations and advanced threat research. You will design and run Red Team exercises, simulate real‑world attacks, and help protect both the company and its customers from evolving cyber threats.

Key responsibilities

• Lead, plan, design, and execute Red Team operations, threat modeling, and adversarial simulations against JFrog’s infrastructure and cloud environments.
• Drive threat research and intelligence initiatives to stay ahead of emerging cyber threats, attack techniques, and vulnerabilities.
• Develop and execute advanced attack scenarios to assess security defenses and provide actionable recommendations.
• Collaborate with security engineering, DevOps, and software development teams to implement findings and enhance defenses.
• Lead the development of tooling, frameworks, and methodologies to automate and optimize Red Team exercises.

Required profile

• 7+ years of experience in offensive security operations, Red Teaming, threat hunting, or threat research.
• Deep knowledge of attack techniques, TTPs, adversary simulations, and threat‑hunting methodologies.
• Hands‑on experience with Red Team tools and custom exploit development.
• Strong experience with cloud platforms (AWS, GCP, Azure) and containerized environments (Kubernetes, Docker).
• Familiarity with the MITRE ATT&CK Framework and ability to translate findings into actionable insights.

Required skills

• Metasploit, Cobalt Strike, Burp Suite
• AWS, Google Cloud Platform, Microsoft Azure
• Kubernetes and Docker
• MITRE ATT&CK Framework
• Scripting and automation for tool development