Offensive Security Engineer

Join the Senior Offensive Security Engineer role at Sporty Group .

About the Role

In this role you will be leading high‑impact offensive security on product and platform surfaces (web, mobile backends, APIs) and driving remediation with DevOps and product squads.

What You'll Be Doing

• Plan and execute offensive engagements across web/mobile/API, auth flows, and business logic
• Build repeatable test harnesses and document exploit chains; file issues with risk/rationale and fix guidance
• Partner with engineering on design reviews, fixes, and validation; mentor peers
• Contribute to threat modeling and secure design patterns

What You'll Bring

• 5+ years in AppSec/offensive security focused on web/API
• Fluency in auth (OAuth/OIDC), access control (IDOR/BOLA), SSRF, injection classes
• Strong scripting (Python/Go/JS) and proxy tooling (Burp/ZAP)
• Clear communication to translate technical risk into business impact

What’s In It For You

• Sporty is a remote first company in pursuit of sustainability
• A competitive salary + individual performance based bonuses every quarter
• 28 days paid annual leave
• Our core working hours are 10am-3pm in your local time zone with flexibility outside of this
• Referral bonuses & flash bonuses
• Top of the line equipment
• Annual company retreats to provide great internal networking opportunities

Interview Process

• Remote video screening with our Talent Acquisition Team
• Online assessment via Hackerrank
• Remote video interview with Team Members (60 Mins)
• Final discussion with the hiring manager (60 mins)

If you’re interested, we encourage you to apply! Every application is reviewed by a member of our team (AI is not used in our recruitment process), and we aim to respond within 48 hours.

Seniority level

• Mid‑Senior level

Employment type

• Full-time

Job function

• Information Technology

Referrals increase your chances of interviewing at Sporty Group by 2x.