Senior Offensive Security Engineer

Job description

This position requires access to or use of information which is subject to export restrictions, including the International Traffic in Arms Regulations (ITAR). All applicants for this position must be "U.S. Persons" within the meaning of the ITAR. "U.S. Persons" include U.S. Citizens, U.S. Lawful Permanent Residents (i.e. 'Green Card Holders'), Political Asylees, Refugees or other protected individuals as defined by 8 U.S.C. 1324b(a)(3)’.

This position can be based out of any of our office locations in Austin, TX; Madison, WI; Morrisville, NC; or Hillsboro, OR, with a hybrid or onsite work arrangement.

We Are

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

You Are

You have spent years learning how systems break, and you have gotten good at finding those weak points before someone else does. You approach security testing with curiosity and rigor, not just running scans but understanding the context behind what you find. When you identify a vulnerability, you think about the business impact and how to explain it in a way that helps teams actually fix it.

You understand that effective security work is as much about collaboration as it is about technical skill. You have worked with engineering teams who do not live in security every day, and you have learned how to communicate findings in a way that builds trust rather than defensiveness. You ask good questions, you listen, and you help people understand not just what is broken but why it matters.

What You'll Be Doing

Conduct penetration testing across Synopsys applications and infrastructure, identifying vulnerabilities and working with engineering and operations teams to develop practical remediation plans

Build and deploy autonomous security testing solutions using AI to help scale vulnerability detection across the organization, exploring new ways to improve coverage and efficiency

Perform attack surface reviews of critical systems, recommending defense strategies that help prevent exploits and improve overall security resilience

Analyze security test data to support root cause analysis, collaborating with development and infrastructure teams to understand vulnerabilities and address underlying issues

Monitor vulnerability disclosure feeds and threat intelligence sources, helping the team stay informed about emerging threats and prioritize testing efforts accordingly

Work with cross-functional security, engineering, and cloud operations teams on security initiatives, aligning testing activities with broader organizational goals

Deliver clear, actionable assessment reports to stakeholders, translating technical findings into language that makes sense for different audiences across the organization

The Impact You Will Have

Help reduce security risk across Synopsys infrastructure and applications by identifying vulnerabilities and supporting teams in addressing them effectively

Contribute to building security capabilities that can operate at greater scale and speed through AI-driven testing approaches

Support stronger defenses across cloud and on-premises environments by recommending security controls based on real-world testing insights

Help engineering teams respond more effectively to vulnerabilities by providing clear analysis and practical remediation guidance

Improve organizational awareness of emerging threats by translating external intelligence into relevant testing priorities and defensive considerations

Contribute your testing expertise to help shape security practices and standards that reflect real-world attack patterns and risks

Play a role in protecting the intellectual property and infrastructure that supports semiconductor innovation for customers worldwide

What You'll Need

8+ years of hands-on experience performing penetration testing at both application and infrastructure levels, ideally in enterprise environments

Experience building autonomous security solutions, particularly using AI or machine learning to enhance vulnerability detection and testing workflows

Strong working knowledge of security testing and analysis tools such as Burp Suite, Metasploit, Cobalt Strike, BloodHound, or similar platforms

Experience conducting security assessments in cloud environments including AWS, Azure, or GCP, with understanding of cloud-specific security considerations

Solid knowledge of vulnerability frameworks including CVSS, OWASP Top 10, MITRE ATT&CK, and how to apply them in practical testing scenarios

Software development experience in C/C++, Java, or Python, with ability to write scripts, automation tools, and work with code at a technical level

Bachelor's degree in Computer Science, Cybersecurity, or equivalent practical experience; certifications such as OSCP, OSCE, or HTB CPTS are helpful but not required

Who You Are

You can explain a security vulnerability to engineers in a way that helps them understand the issue and feel supported in fixing it, rather than blamed for creating it

You approach testing with thoroughness, taking time to explore beyond surface-level findings because you know the most important issues often require deeper investigation

You are comfortable working independently on complex assessments, but you also value collaboration and know when to reach out to colleagues for input or support

You stay current on security trends and emerging threats because you are genuinely interested in how the landscape evolves and what that means for defense

You can write technical reports that developers can use and executive summaries that non-technical stakeholders can understand and act on

You handle sensitive information with discretion and understand the importance of confidentiality in security work

The Team You'll Be Part Of

You will join the Synopsys Attack Surface Management team, a group focused on proactively identifying and managing the remediation of security vulnerabilities across Synopsys' global infrastructure, applications, and services. The team works closely with engineering, cloud operations, and product security teams to support security initiatives and enhance the overall security posture of the company. Your work will directly influence how Synopsys secures the tools and platforms that power semiconductor innovation worldwide.

Rewards and Benefits

We offer a comprehensive range of health, wellness, and financial benefits to cater to your needs. Our total rewards include both monetary and non-monetary offerings. Your recruiter will provide more details about the salary range and benefits during the hiring process.

At Synopsys, we want talented people of every background to feel valued and supported to do their best work. Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, age, military veteran status, or disability.

In addition to the base salary, this role may be eligible for an annual bonus, equity, and other discretionary bonuses. Synopsys offers comprehensive health, wellness, and financial benefits as part of a competitive total rewards package. The actual compensation offered will be based on a number of job-related factors, including location, skills, experience, and education. Your recruiter can share more specific details on the total rewards package upon request.

#J-18808-Ljbffr

Worksite address

morrisville, NC, 27560, US

Who can apply

Review the original listing for work authorization, qualifications and employer requirements.