Offensive Security Engineer – Off-Chain / Cloud

About Halborn Inc

Our mission is to provide value-add security services and products to the world’s most cutting edge technology firms and that starts with blockchain tech. Founded in 2019, Halborn is an elite cyber security company focused on solving complex adversarial problems unique to the cryptocurrency and fintech industries. From breaches and social engineering to stolen private keys and economic hacks, Halborn solves it. Our clientele are the exclusive blockchain companies as well as new startups with high growth trajectories.

Our Culture

Halborn is a globally distributed team of 100+, looking to grow our elite team of white hat hackers, sales professionals, security engineers and DevSecOps specialists who value independence, want to make their own hours, work for themselves and have a passion for the ever evolving cryptocurrency industry.

Our Commitment to Diversity

Halborn Inc is an Equal Opportunity Employer. We do not discriminate based upon race, religion, color, national origin, sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, education, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics and celebrates the diversity of its growing team.

We are unable to sponsor or take over sponsorship of employment Visas at this time.

Recruitment agencies and consultants may not submit resumes/CVs through this website or directly to managers. Halborn does not accept unsolicited agency resumes, and will not pay fees to any third-party agency or company that does not have a signed agreement with Halborn Inc.

Responsibilities

• Conduct offensive security engagements across:
• Cloud environments (AWS, Azure, GCP)
• Infrastructure and network security
• Web applications and APIs
• Perform penetration testing, red team–style assessments, and vulnerability exploitation
• Identify, validate, and clearly document security findings
• Produce high-quality technical reports with actionable remediation guidance
• Work directly with clients as part of security delivery engagements
• Collaborate with other offensive security engineers and security architects
• Contribute to internal tooling, scripts, and security research where relevant

Requirements

• Strong hands-on experience in offensive security / penetration testing
• Practical experience testing cloud environments
• Solid understanding of:
• Web application security
• API security
• Infrastructure and network security
• Experience with common offensive security tools and techniques
• Ability to clearly communicate technical findings in written reports
• Comfortable working in a client-facing delivery role
• Demonstrated initiative through tooling, scripting, labs, or open-source contributions

Nice to Have

• Relevant offensive security certifications (e.g. OSCP/OSWP, CRTP/CARTP, CREST, cloud or mobile/wireless),
• experience in consulting or security services environments,
• contributions to open-source security research or tooling,
• hands-on development of internal tools or automation,
• and exposure to diverse enterprise client environments, particularly within blockchain or Web3 contexts (Although non mandatory)