Offchain
via Lever
Senior Penetration Tester (AWS)
still open
verified 1d ago
posted 528d ago seen just now
Posted 528 days ago, which is unusual. The employer's own board was still carrying it when we last read it, just now.
Apply at jobs.lever.co
This is the employer's own posting, not a copy on a job board.
What we know
Is it still open?
Confirmed still open
Last checked 1d ago — checked against the employer's own applicant tracking system, which is the company answering directly.
We re-read the employer's own applicant tracking system and the posting was still there. That is the company answering directly.
How old is it?
Posted 528d ago
The date the source published, not the day we noticed it (2025-05-23). Last seen at its source just now.
We have tracked this listing since 8 Aug 2026 (86 days). The employer's own board has carried it every time we have read it since 19 Aug, when our records begin, most recently just now.
Is it remote?
Remote
That is the location the employer filed this posting under. Quoted as written — we do not re-word the source's own location.
Who may apply?
Not stated
The description states no restriction of its own. This is the source's own tag.
Skills named in the ad
Recognised terms only, from a fixed vocabulary — this is what CV matching compares against.
Carried by 1 source
-
Lever employer's own board first seen 86d ago · last seen just now
The listing
At Offchain, we aren’t just building products: we’re leading a movement.
As pioneers in blockchain scalability and security, we're at the forefront of transforming how the world interacts with decentralized applications. We're laying the foundation that will define the next generation of digital commerce, governance, and human interaction. This involves tackling real-world challenges that come with scaling blockchain technology, without compromising on its core principles: decentralization, security and transparency.
At the center of this vision is our people. Our team is made up of thinkers and doers that embrace new challenges and seek solutions that push existing boundaries. If you’re energized by solving unprecedented problems, and believe in the role that decentralized systems will play in creating a more equitable digital future, then we want to hear from you.
Why Offchain?
Offchain is setting the pace for the entire Ethereum ecosystem. We built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution that exists today.
Arbitrum’s ecosystem is undergoing tremendous growth with hundreds of projects and dApps on Arbitrum One today. Over 100 different teams have used Offchain technology to build their own Arbitrum chains. Major players in the space, Robinhood, BlackRock, Ethena Labs, Securitize, Aave, and Apechain are all using the Arbitrum stack.
Arbitrum’s thriving ecosystem wouldn’t exist without our advanced technology stack. Arbitrum, Prysm, ZeroDev. These aren’t just product names. These are tools that are actively reshaping what's possible on Ethereum and advancing its core infrastructure.
To top it all off? We’re backed by $124 million in funding. We’ve demonstrated consistent execution with billions in secured value, thousands of supported projects, and infrastructure processing millions of transactions seamlessly.
The Role
- As a Senior Security Engineer at Offchain, you will emulate the real-world tactics, techniques, and procedures of sophisticated adversaries to surface vulnerabilities across our infrastructure and ecosystem tools.
- You’ll run hands-on penetration tests, lead red team exercises, and work side-by-side with blue team partners to test, refine, and strengthen detection and response capabilities.
- Your efforts will directly shape how Offchain designs, launches, protects, and achieves compliance for the infrastructure that powers millions of users and applications - including key standards such as SOC 2.
What you'll do:
What you'll need:
- 5+ years of experience in offensive security, penetration testing, red teaming, or a closely related field.
- Extensive experience with conducting code audits to identify and remediate security issues.
- Experience with binary exploitation.
- Mastery of AWS & specific attack techniques and configuration weaknesses.
- Strong understanding of adversary tactics and frameworks like MITRE ATT&CK.
- In-depth knowledge of web application security, including OWASP Top 10, ASVS, and common vulnerability categories.
- Proficiency using offensive security tools such as Burp Suite, nuclei and similar frameworks.
- Strong programming skills in Python, Go, or similar languages, with proven experience developing tools or automation.
- Excellent written and verbal communication skills, with the ability to present complex technical details as clear, risk-focused recommendations.
- A natural ability to think like an attacker - creative, determined, and skilled at assessing risk across complex systems.
Nice-to-haves
- Web3 / blockchain security exposure: smart contract auditing, bug bounty hunting (e.g., Immunefi, Code4rena), or DeFi protocol review.
- Familiarity with Ethereum L1 / L2 node architecture and security risks.
- Experience in blockchain infrastructure penetration testing.