Senior Offensive Security Engineer at SurveyMonkey

SurveyMonkey is seeking a Senior Offensive Security Engineer to join their team in Dublin, Ireland. This role involves planning and executing penetration testing and offensive security assessments against corporate assets and SurveyMonkey products. The engineer will collaborate with company partners to plan and execute penetration tests, perform red/blue team activities, and prioritize remediations with engineering teams. They will also work with external partners to assess findings. Responsibilities include:

• Performing adversarial simulations on internet and internal assets.
• Evaluating the efficacy of existing detection and mitigation mechanisms.
• Performing penetration testing against SurveyMonkey assets.
• Engaging and educating engineering teams on application security best practices.
• Reviewing design proposals and threat models.
• Exploiting vulnerabilities and tracking findings.

Requirements include:

• 5+ years of experience conducting application security assessments and penetration tests.
• Experience planning & performing web application, cloud and network penetration testing assessments.
• Knowledge of server and client operating systems.
• Knowledge of attack surfaces for applications, enterprise systems and services.
• Experience in at least one of PHP, Python, Ruby, or Java.
• Experience with bug bounty programs.
• Experience gaining the trust of others through honesty, integrity, and authenticity.

SurveyMonkey offers:

• In-person collaboration opportunities.
• An inclusive workplace.
• Learning and development opportunities.