Offensive Security Engineer
Description
As an Offensive Security Engineer, you’ll act as an in-house attacker; finding and proving the risks that matter before anyone else can. You’ll play a key role in helping us build secure-by-default products by bringing an offensive mindset into everyday engineering decisions. Working closely with engineers, product managers, and DevOps, you’ll uncover real-world attack paths, challenge assumptions, and help teams fix issues in a practical, scalable way. If you enjoy getting hands-on, digging deep into systems, and turning complex vulnerabilities into clear action, this is where you’ll thrive.
Responsibilities
- Perform in-depth penetration tests across web apps, APIs, and infrastructure-going beyond automated tools to uncover meaningful flaws
- Develop clear, impactful PoCs that demonstrate real risk and help teams prioritize fixes effectively
- Collaborate closely with engineers to guide remediation and validate fixes through re-testing
- Contribute to threat modeling and design reviews, helping identify security gaps early in the SDLC
- Build and refine scripts, tools, and testing approaches to improve coverage and efficiency
Requirements
- 3–5+ years of hands-on experience in offensive security, penetration testing, or product security (required)
- Strong understanding of common vulnerabilities (OWASP Top 10, SANS 25) and how they manifest in real systems (required)
- Practical, hands-on mindset; comfortable testing, exploiting, and explaining vulnerabilities end-to-end (required)
- Able to clearly communicate technical findings and recommended fixes to engineering teams (required)
- Curious and persistent; you enjoy digging deeper, connecting dots, and understanding how things break (required)
Benefits
- Flexibility to work where you thrive – Enjoy the freedom of our Hybrid working model, combining onsite collaboration and remote work, with an additional 25 days per year to work from a city or country of your choice.
- Reward for your impact – Receive a competitive total compensation package aligned with Bitpanda’s pay-for-impact policy, including participation in our stock option plan.
- Support for your mental wellbeing – Access confidential coaching, counselling, and mental health resources whenever you need them through OpenUP.
- Time to recharge – Take extra time off to rest, reset, and recharge, with 3 additional days off in 2026 to prioritise your wellbeing.
- Continuous learning and growth – Grow your skills and stay ahead in your career with unlimited access to Udemy’s library of online courses at your own pace.
- Exclusive perks and rewards – Enjoy discounts, rewards, and perks from partners worldwide across lifestyle, wellness, tech, and travel.
- Support during life milestones – Take advantage of our additional 8 weeks of gender-neutral new parent leave to welcome and bond with your new addition to the family.
- Fuel and focus on-site – Pandas in Vienna, Bucharest, Barcelona, and Berlin can enjoy free onsite dining, with freshly prepared lunches and snacks to keep you fueled and focused all day long.
- Recognition for your contributions – Celebrate milestones and achievements with recognition and rewards for your Tenure at Bitpanda.
- Show your Bitpanda pride – Access exclusive Bitpanda-branded merchandise and gear to represent.
- Connect and celebrate with your team – Join unforgettable company events, from our Winter Party in Vienna to gatherings worldwide, fostering fun, connection, and celebration.
- Location-specific benefits designed to make life at Bitpanda even more rewarding wherever you are.
