What are the responsibilities and job description for the Senior Offensive Security Engineer position at Astranis and Careers?
Astranis builds advanced satellites for high orbits, expanding humanity's reach into the solar system. Today, Astranis satellites provide dedicated, secure networks to highly-sophisticated customers across the globe— large enterprises, sovereign governments, and the US military. With five satellites on orbit and many more set to launch soon, the company is servicing a backlog of more than $1 billion of commercial contracts.
Astranis is the preferred satellite communications partner for buyers with stringent requirements for uptime, data security, network visibility, and customization.Astranis has raised over $750 million from some of the world's best investors, from Andreessen Horowitz to Blackrock and Fidelity, and employs a team of 450 engineers and entrepreneurs. Astranis designs, builds, and operates its satellites out of its 153,000 sq. ft. headquarters in Northern California, USA.
Senior Offensive Security Engineer
As a Senior Offensive Security Engineer, you will lead penetration testing and adversarial simulation efforts targeting our applications, cloud infrastructure, and corporate networks. You will emulate real-world attackers to identify weaknesses across the software and IT stack, and work closely with engineering and IT teams to improve our defenses. Your focus is offensive testing of application and enterprise systems.
Role
- Offensive & Penetration Testing (Primary)
- Perform penetration tests of web apps, APIs, backend services, cloud infrastructure, and corporate networks.
- Conduct threat emulation exercises, red-team scenarios, and targeted attack simulations.
- Assess CI/CD pipelines, IAM configurations, and internal services for exploitable weaknesses.
- Lead offensive security initiatives and serve as the organization's primary expert for AppSec and enterprise pentesting.
- Security Research & Adversarial Analysis
- Track emerging threats, techniques, and vulnerabilities relevant to cloud and enterprise environments.
- Develop custom exploits or proof-of-concepts as needed to validate findings.
- Collaboration & Remediation Support
- Work with development, infra, and IT teams to validate controls and guide effective remediation.
- Provide actionable risk assessments from an attacker's perspective.
- Contribute offensive insights to secure system design guidance.
- General Product Security Support (Secondary)
- Assist with code review and threat modeling for software components when offensive insights are needed.
Requirements
- 5 years of hands-on offensive security experience (AppSec, cloud, or enterprise penetration testing).
- Demonstrated experience leading complex penetration tests for web apps, APIs, and cloud platforms.
- Strong proficiency in offensive tooling (Burp Suite, Nmap, Metasploit, proxy tools, etc.) and manual testing techniques.
- Familiarity with cloud-native attack vectors (AWS/Azure/GCP).
- Proficiency in at least one scripting or exploitation-oriented language (Python, Go, JavaScript, etc.).
- Strong analytical and problem-solving skills with an attacker's mindset.
- Ability to explain complex technical vulnerabilities to a range of audiences.
Salary : $160,000 - $240,000