Staff Offensive Security Engineer

Aquanow, a leading infrastructure and liquidity provider that provides institutional and enterprise application platforms for digital assets, is looking for a Staff Offensive Security Engineer to join our security team. This is a unique opportunity to work alongside a highly-experienced team and contribute to the development of a high-growth trading and technology company.

If you want to have your name in the success story of a globalizing company, we look forward to receiving your application to the winning Aquanow team!

What You'll Do:

• Plan and execute red team operations, adversarial simulations, and penetration tests across applications, infrastructure, networks, offices, and internal processes.
• Serve as a subject matter expert by documenting findings, recommending remediation strategies, and supporting teams through fixes.
• Perform threat modeling for new and existing services, clearly articulating security risks and tradeoffs to engineering and risk stakeholders.
• Conduct vulnerability research, exploit development, and testing using both custom tooling and public proof-of-concept techniques.
• Partner with detection and response teams to simulate realistic attack scenarios and evaluate monitoring and incident response readiness.
• Write and maintain tooling to automate and scale offensive security assessments.
• Mentor teammates and contribute to shared knowledge through internal documentation, presentations, and external talks or blog posts.

You'll Need to Have:

• 8+ years of hands-on experience in red teaming, offensive security, or penetration testing.
• Demonstrated experience mentoring or guiding other security engineers.
• Strong understanding of threat modeling methodologies and the MITRE ATT&CK framework.
• Experience testing modern environments, including cloud platforms (AWS, GCP), containerized systems (Docker, Kubernetes), CI pipelines, and identity systems.
• Working knowledge of defensive security tools such as IDS/IPS, EDR, packet capture, and network monitoring, including common evasion techniques.
• Proficiency in Python, Go, or JavaScript for exploit development, tooling, or automation.
• Clear written and verbal communication skills, with the ability to explain technical findings to both engineers and senior leaders.
• Experience collaborating with distributed teams and documenting work through tools such as Slack, Jira, GitHub, and email.
• Ability to work independently and solve problems.

We'd Love to See:

• Automation experience with AWS. Relevant certifications such as AWS Certified Security - Specialty, CEH are highly desirable.
• Experience in a global fast moving environment covering multiple time zones.
• Familiarity with common security vulnerabilities and the ability to judge their severity and impact on the business.
• Passion in all things security.
• Stay updated with the latest security trends & AI technologies.

The Interview Process:

• Stage 1: A 45-minute video call with the Security Manager
• Stage 2: A 60-minutes technical deep dive with the members of the Security team.
• Stage 3: A 30-minute video call with the CISO
• Stage 4: Potential follow up call