Source Job

$180,000–$240,000/yr
Global Unlimited PTO

  • Develop and maintain a multi-platform implant in Rust for Windows, Linux, and macOS.
  • Build C2 infrastructure, post-exploitation modules, and AV/EDR evasion techniques.
  • Design network pivoting and tunneling capabilities, and write integration tests.

Rust Python Networking

20 jobs similar to Offensive Tooling Engineer

Jobs ranked by similarity.

US 12w maternity 12w paternity

  • Identify innovative ways to detect Windows OS threats and develop cross-platform features leveraging telemetry from OS subsystems.
  • Collaborate with Product, Engineering, and Security teams to implement detection logic and address gaps in product coverage.
  • Apply AI to improve research quality and speed, and mentor team members to advance technical expertise.

Huntress is a cybersecurity company founded by former NSA operators that provides enterprise-grade cybersecurity to businesses of all sizes. They are a remote-first team securing over 5 million endpoints and 11 million identities, with a culture focused on collaboration and making a meaningful impact.

$64,800–$86,400/yr
EMEA

  • Develop and maintain high-performance backend services and platform components using Rust.
  • Design and implement scalable APIs and asynchronous microservices for distributed systems.
  • Collaborate with Product, DevOps, and Security teams to integrate cybersecurity features and ensure robust, secure solutions.

Exein builds the security layer for a world where physical and digital threats converge, from kernel-level runtime protection on embedded devices to cloud-native platforms. They are a growing company with a culture of technical excellence, continuous learning, and inclusive collaboration.

Europe US Unlimited PTO

  • Triage, validate, and remediate security vulnerabilities across products, infrastructure, and internal systems.
  • Develop, maintain, and contribute to internal and open-source security tooling, writing production-grade code.
  • Improve secure development practices through code reviews, threat modeling, and security design reviews.

Tiger Data provides the fastest PostgreSQL platform for transactional, analytical, and agentic workloads. With over 2,000 customers and 3 million active databases, it is a remote-first team backed by $180 million in funding.

$152,000–$175,000/yr
US Unlimited PTO

  • Design and implement robust workload and network isolation for multi-tenant GPU bare-metal and virtualized environments.
  • Harden Linux kernel configurations, container runtimes, and orchestration layers against breakouts and privilege escalation.
  • Write low-level code in C, Go, or Rust to implement custom security controls, telemetry, and fixes at the OS and infrastructure level.

RunPod is the AI Developer Cloud, providing GPU cloud infrastructure for AI workloads. With over one million developers and a small, remote-first team, we prioritize ownership, speed, and impact, having closed a $100M Series A.

Rust Engineer

MatX
US 4w PTO 12w maternity 12w paternity

  • You will use your Rust experience to build infrastructure and tooling for hardware and software teams.
  • You will design and implement a Rust-based simulator and host-side interface library.
  • You will write tests to systematically explore corner cases and rare event sequences.

MatX is building best-in-class silicon for high-performance and sustainable GenAI. They are a growing company with a focus on creating an inviting and inclusive work environment.

$240,000–$270,000/yr
US Unlimited PTO

  • Develop advanced defensive security capabilities including deception technologies and threat detection.
  • Lead technical vision and execution for security-focused workstreams from concept to production.
  • Collaborate with product, engineering, and security teams to build scalable, secure software.

This role is with a partner company via Jobgether, which uses AI-powered matching to connect candidates with hiring companies. They are a growing cybersecurity organization focused on innovation and technical excellence.

Mexico

  • Design, develop, and support network communication solutions for secure and scalable environments.
  • Work with protocols like TCP/IP, HTTP, DNS, and cloud platforms such as AWS, Azure, and GCP.
  • Collaborate with engineering teams to optimize performance and reliability in distributed systems.

The partner company develops modern communication systems and protocol-driven solutions for secure, scalable network environments. They foster a technically driven, flexible remote work culture with a focus on engineering excellence.

$120,000–$155,000/yr
US

  • Perform Red Team engagements including stealth and purple teaming to simulate advanced cyber attacks and test security posture.
  • Collaborate with blue team members in real time to identify and address security gaps, and document findings for technical and executive audiences.
  • Stay current on attack vectors, develop new tools and techniques, and provide technical leadership to junior team members.

NBCUniversal is a leading media and entertainment company, creating world-class content across film, television, streaming, and theme parks. As a subsidiary of Comcast, we employ a global workforce and foster an inclusive culture focused on innovation and community.

$202,000–$278,000/yr
US Unlimited PTO

  • Drive product capability by bringing an offensive practitioner's perspective to scanning, fingerprinting, and attack surface data.
  • Conduct original research on emerging attack techniques using Internet-wide scan data and publish findings at major conferences.
  • Collaborate with engineering and product teams to translate research into new scanning modules, fingerprints, and detection features.

Censys provides real-time Internet intelligence and actionable threat insights to global governments, over 50% of the Fortune 500, and leading threat intelligence providers worldwide. The company values collaboration, innovation, and impact, with a team of world-class researchers and engineers.

US Unlimited PTO

  • Build, patch, and test userspace packages for Rocky Linux, focusing on CVE remediation and RPM packaging.
  • Improve tooling and automation for the package-building process and develop automated tests.
  • Collaborate with engineering, product, and sales teams to develop solutions and document projects.

CIQ builds enterprise infrastructure for demanding workloads, including AI infrastructure, high-performance computing, and cloud-native orchestration. They are a company of builders, operators, and open source practitioners, supporting Rocky Linux and serving major enterprises and government agencies.

India

  • Design, build, and maintain full-stack features across a Python/Flask backend and a TypeScript/React frontend.
  • Build and maintain integrations connecting Mayhem with customer systems, security tools, and workflow engines.
  • Ensure high accessibility, stability, and performance across integration workflows.

Bugcrowd empowers organizations to stay ahead of threat actors by uniting a trusted hacker community with a patented AI-driven Security Knowledge Platform. The company is backed by General Catalyst and Rally Ventures, with offices in San Francisco and New Hampshire, fostering a diverse and inclusive culture.

$75,000–$95,000/yr
US

  • Design and build the next-generation bare metal deployment pipeline to achieve sub-60-second provisioning times.
  • Develop and maintain automation and management toolkits for bare metal servers.
  • Implement firmware update workflows and integrate VPC networking for bare metal instances.

Vultr provides high-performance cloud infrastructure solutions globally. With 33 data centers and a recent $3.5 billion valuation, it is the world's largest privately-held cloud infrastructure company.

US 2000w PTO

  • Support post-incident recovery by collaborating with DFIR teams to assess the scope of cyber incidents.
  • Restore compromised systems to pre-incident states through data recovery, system configuration, and hardening.
  • Reimage and reconfigure endpoints, servers, and services such as Active Directory and Exchange.

Surefire Cyber is redefining incident response by delivering swift, strong responses to cyber incidents like ransomware and data theft. Backed by industry veterans, the company focuses on efficiency, predictability, and transparency for clients.

$200,000–$300,000/yr
US Unlimited PTO 12w maternity 12w paternity

  • Work on core Radar products using TypeScript, Rust, Python, and Scala.
  • Build highly available systems with 99.99%+ monthly uptime.
  • Own the internal development platform and integrate safe AI-enabled development practices.

Radar is the global leader in geolocation, providing geofencing SDKs, maps APIs, and AI-enabled solutions for marketing, fraud, and operations teams. They have raised $85.5M from top investors, process over 1 billion API calls per day, and have a high-performance culture with ambitious teammates.

$139,883–$175,098/yr
Canada 20w maternity 16w paternity

  • Work with engineers on a native Windows desktop client using Windows App SDK, WinUI, C#, XAML and Go.
  • Implement support for the latest Windows platform features while maintaining compatibility with older versions.
  • Develop and optimize product features on Windows with a focus on UI components and platform integration.

Tailscale builds software to securely interconnect people and devices, creating a safe and easy internet experience. It is a fully distributed company backed by Accel, CRV, and others, with a culture of flexibility and inclusion.

Global

  • Conduct security reviews and penetration tests across Brave products including the browser and search engine.
  • Triaging and fixing security reports, and designing secure code in C++ and other languages.
  • Work asynchronously with a geographically-distributed team to secure AWS infrastructure and web security models.

Brave builds a privacy-focused web browser that blocks trackers and ads, a private search engine, a crypto wallet, and an opt-in private ad network. With over 110 million monthly active users and a small, distributed team, Brave is dedicated to protecting user privacy and challenging Big Tech.

$200,000–$220,000/yr
US

  • Design, develop, and maintain high-performance agents using Go, with focus on OS internals and telemetry extraction.
  • Integrate endpoint application with backend SaaS web application’s REST APIs for threat hunting, ensuring low resource usage.
  • Mentor junior engineers, set technical direction, and define AI-assisted code review standards for the team.

Huntress makes enterprise-grade cybersecurity accessible to businesses of all sizes, founded in 2015 by former NSA cyber operators. It is a remote-first team that secures over 5 million endpoints and 11 million identities worldwide, backed by a 24/7 human-led Security Operations Center.

Europe

  • Define security requirements and design application architectures following a secure-by-default approach.
  • Conduct threat modeling, code reviews, and penetration testing on cloud-based web and mobile apps.
  • Implement, manage, and automate SAST/DAST/SCA security controls and WAF rules to enforce protection at scale.

Prima is a motor insurance company that uses data and technology to provide a great experience for drivers. They are trusted by over 5 million drivers and have over 350 engineers in their Engineering department, fostering a culture of curiosity and collaboration.

India

  • Investigate and analyze security alerts and incidents across endpoint, network, cloud, and identity environments.
  • Conduct proactive threat hunting, malware analysis, and deobfuscation of suspicious scripts.
  • Collaborate with senior analysts, document findings, and provide remediation recommendations.

The company operates a global Managed Detection and Response environment, protecting organizations from cyber threats. It has a remote-first culture with a collaborative team and opportunities for professional growth.

Global Unlimited PTO

  • Design and build the client-side telemetry system in the Rust core for SDK observability across all platforms.
  • Evolve support bundles and reduce logging overhead to ensure near-invisible performance impact.
  • Own Rust SDK development, customer support, and direct engagement with debugging production issues.

Ditto builds a peer-to-peer sync engine for real-time data at the edge. With over $145 million in funding and a globally distributed team, we are a fast-growing startup committed to diversity and inclusion.