About this opportunity
Districttechgroup lists this Offensive Security & Code Analysis Engineer opportunity in washington, District of Columbia. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Offensive Security & Code Analysis Engineer
Washington, DC Remote Full-Time
About This Role
As an Offensive Security & Code Analysis Engineer, you will identify vulnerabilities before attackers do. You will conduct penetration testing, code reviews, and security assessments to help our clients strengthen their defenses. This role combines hands-on technical testing with strategic security consulting.
Responsibilities
• Conduct penetration testing of web applications, networks, and cloud environments
• Perform source code security reviews and static/dynamic analysis
• Identify and exploit vulnerabilities in client applications and infrastructure
• Develop detailed reports with findings, risk ratings, and remediation guidance
• Create proof-of-concept exploits and demonstrations
• Research emerging attack techniques and develop new testing methodologies
• Collaborate with development teams on secure coding practices
• Present findings to technical and executive audiences
• Contribute to red team engagements and adversary simulations
Qualifications
✓ 3+ years of experience in penetration testing or offensive security
✓ Strong knowledge of web application vulnerabilities (OWASP Top 10)
✓ Experience with penetration testing tools (Burp Suite, Metasploit, Nmap, etc.)
✓ Understanding of secure coding practices and common code vulnerabilities
✓ Knowledge of network protocols, Active Directory, and cloud environments
✓ Excellent report writing and communication skills
✓ Strong analytical and creative problem-solving abilities
Preferred Qualifications
+ Offensive security certifications (OSCP, OSWE, GPEN, or equivalent)
+ Bug bounty experience or CVE publications
+ Experience with mobile application security testing
+ Cloud security testing experience (AWS, Azure, GCP)
+ Familiarity with DevSecOps and CI/CD security integration
+ Reverse engineering or malware analysis experience
What We Offer
★ Fully remote work environment
★ Competitive salary and performance bonuses
★ Health, dental, and vision insurance
★ Professional development and certification support
★ Access to the latest security tools and training
★ Opportunity to work on diverse and challenging engagements
#J-18808-Ljbffr
Worksite address
washington, DC, 20022, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.