Senior Offensive Security Engineer
Tel Aviv/ Netanya · Netanya/Tel Aviv · 7+ years experience · Posted Sep 28, 2026
At a glance
- Experience
- 7+ years experience
- Location
- Tel Aviv/ Netanya · Netanya/Tel Aviv
About the role
- The Senior Offensive Security Engineer will spearhead offensive security operations and lead advanced threat research initiatives at JFrog.
- This role involves developing and executing Red Team exercises, simulating real-world attacks, and identifying security weaknesses across systems and applications.
Responsibilities
- Lead, plan, design, and execute Red Team operations, threat modeling, and adversarial simulations against infrastructure and cloud environments.
- Drive threat research and intelligence initiatives to stay ahead of emerging cyber threats, attack techniques, and vulnerabilities.
- Develop and execute advanced attack scenarios to assess security defenses and provide actionable recommendations.
- Collaborate with security engineering, DevOps, and software development teams to implement findings and enhance defenses.
- Lead the development of tooling, frameworks, and methodologies to automate and optimize Red Team exercises.
- Mentor and guide a team of security professionals.
- Participate in incident responses when Red Team exercises reveal vulnerabilities.
- Continuously assess and improve security processes, playbooks, and threat detection mechanisms.
Requirements
- 7+ years of experience in offensive security operations, Red Teaming, threat hunting, or threat research.
- Deep knowledge of attack techniques, TTPs, adversary simulations, and threat-hunting methodologies.
- Hands-on experience with Red Team tools, frameworks, and custom exploit development.
- Strong experience with cloud platforms (AWS, GCP, Azure) and containerized environments (Kubernetes, Docker).
- Familiarity with the MITRE ATT&CK Framework.
- Proficiency with scripting and automation languages.
- Solid understanding of offensive security best practices, vulnerability management, threat detection, and advanced threat analysis.
- Ability to effectively communicate and collaborate with cross-functional teams.
- Passion for continuous learning, research, and innovation.
Skills
- Metasploit
- Cobalt Strike
- Burp Suite
- AWS
- GCP
- Azure
- Kubernetes
- Docker
- MITRE ATT&CK Framework