Sr. Offensive Security Engineer, Security Monitoring

2 months ago


South Jordan, United States Merrick Bank Full time

Merrick Bank employees share in our mission to delight our customers and empower underserved consumers to achieve their credit goals. In return, we delight our associates; ensuring they are noticed, heard, appreciated and understand the importance of their role(s). For over 20 years, our Guiding Principles of; doing the right thing, putting the customer first, and Earn, Learn, Have Fun (aka E.L.F.), have defined who we are as an Employer of Choice. Give Yourself Credit, Work at Merrick

Position Summary:

The Senior Offensive Security Engineer operates, monitors, and improves information security processes and systems that protect the Bank's data, customers, and computer systems from business disruption, data/identity compromise, cyber fraud, and regulatory criticism. This role focuses on application and development security, application penetration testing capabilities, and cloud infrastructure/platform security.

Essential Functions:

Key Offensive Security responsibilities include:

  • Conducting Red Team Exercises to simulate Advanced Persistent Threats (APTs) against web, mobile, and cloud-based applications to identify security weaknesses and assess the effectiveness of security controls.
  • Perform in-depth manual and automated penetration testing against Cloud and On Prem Networks and applications to discover vulnerabilities and weaknesses that could be exploited.
  • Work with development teams to identify potential security threats early in the software development lifecycle (SDLC) and provide recommendations to mitigate risks.
  • Develop and enhance tools, scripts, and frameworks to automate testing and reporting processes, including setting up continuous integration (CI) security checks.
  • Document findings in detailed, actionable reports for both technical and non-technical stakeholders. Communicate effectively with developers, engineers, and executive leadership on remediation strategies.
  • Collaborate with Blue Team (defensive security), DevOps, and engineering teams to improve detection and response capabilities.
  • Stay updated on the latest security threats, vulnerabilities, and exploits, and apply this knowledge to enhance Red Team operations.
Each Security Engineer is also responsible to cross-train and be familiar with other security functions as assigned:
  • Security Monitoring & Response - Detects and responds to security events by identifying, reporting, mitigating, and recovering from security incidents.
  • Security Control Engineering and Operations - Enables and protects business services with appropriate access, endpoint, network, data storage, and data loss prevention controls, including vulnerability and controls testing.
  • Security Risk & Program Management - Assesses and advises technology and business groups by identifying, prioritizing, managing, and reporting security risk.
  • Performs other duties as assigned.
Compliance with Laws & Regulations:
  • Responsible for complying with all of the Bank's internal control policies and procedures.
  • Responsible for understanding and complying with all laws and regulations to which the Bank is subject.
  • Responsible for communicating problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.
Education and Experience:
  • Bachelor's degree in computer science, Cybersecurity, Information Security, or a related field. Equivalent experience will also be considered.
  • 5-8+ years of experience in application security, penetration testing, or Red Team operations.
Summary of Qualifications:
  • Proficient in programming/scripting languages such as C#, Python, JavaScript, PowerShell, Bash, or other relevant to security testing.
  • Strong Foundational Linux skills.
  • Expertise in using security testing tools (e.g., Burp Suite, Nessus, C2 Frameworks, SQLMap, NMAP etc.).
  • Strong knowledge of web application frameworks, APIs, microservices, and cloud environments (AWS, Azure, GCP).
  • Familiarity with Secure Software Development Lifecycle (SSDLC) and DevSecOps practices.
  • Familiarity with highly regulated industries, and specifically the banking industry (including FDIC regulations) is preferred.
  • Demonstrated skills with security concepts, defense-in-depth strategies, security tools, and protocols.
  • "White-hat" mentality, with a healthy sense of paranoia (security awareness and risk).
  • Positive, inquisitive, can-do attitude.
  • Self-starter, requires minimal oversight to perform as expected, work well independently and as part of a team.
  • Comfortably perform well under pressure, deliver to commitments on tight deadlines.
  • Meticulous attention to detail.
  • Passion for cybersecurity and technology trends, news, and hacking techniques.
Work Environment/Physical Demands:
  • May require some travel to company, partner, or vendor locations for various job duties.
  • May require some lifting of up to 50 pounds to rack/maintain IT or security equipment
Security Responsibilities - General:

This classification requires heightened security awareness to safeguard the Bank's data, including customer non-public personal information. This security level means that the job includes exposure to all categories of Bank data, including customer non-public personal information.

General Disclosure:

The above statements reflect the general information considered necessary to describe the principal functions of the job and should not be considered as a detailed description of all work requirements that may be inherent to the position. In addition, the incumbent may be called upon to personally handle projects or assignments not usually related to the position's day-to-day activities. Understand and comply with laws and regulations that are applicable to my job function. Understand and comply with company policies and procedures that are applicable to my job function.

We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location. Our benefits offerings include medical, dental, vision, life insurance, 401(k) plan with company match, paid vacation time, sick time, as well as other benefits and programs to meet the needs of our employees. Further details will be shared during the interview or offer process, as appropriate and applicable.

We are an equal opportunity employer, and we evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status or any other legally protected characteristic. We will conduct a thorough background check for all hires in compliance with applicable law which includes (but may not be limited to) a review of factors including drug testing and employment/personal references.

Other details
  • Pay Type Salary


Apply Now

  • South Jordan, Utah, United States Merrick Bank Full time

    Job SummaryMerrick Bank is seeking a highly skilled Offensive Security Engineer I to join our team. As an essential member of our security operations, you will be responsible for operating, monitoring, and improving information security processes and systems that protect the bank's data, customers, and computer systems from business disruption, data/identity...


  • South Jordan, United States Merrick Bank Full time

    Position Summary:The Senior Offensive Security Engineer operates, monitors, and improves information security processes and systems that protect the Bank’s data, customers, and computer systems from business disruption, data/identity compromise, cyber fraud, and regulatory criticism. This role focuses on application and development security, application...

  • Engineer I

    2 months ago


    South Jordan, United States Merrick Bank Full time

    Merrick Bank employees share in our mission to delight our customers and empower underserved consumers to achieve their credit goals. In return, we delight our associates; ensuring they are noticed, heard, appreciated and understand the importance of their role(s). For over 20 years, our Guiding Principles of; doing the right thing, putting the customer...


  • South Jordan, Utah, United States Merrick Bank Full time

    Job OverviewThis exciting role at Merrick Bank requires an exceptional Senior Offensive Security Engineer to protect our data, customers, and computer systems from cyber threats. The successful candidate will be responsible for operating, monitoring, and improving information security processes and systems.About the RoleThe Senior Offensive Security Engineer...


  • South Jordan, United States Merrick Bank Full time

    Merrick Bank employees share in our mission to delight our customers and empower underserved consumers to achieve their credit goals. In return, we delight our associates; ensuring they are noticed, heard, appreciated and understand the importance of their role(s). For over 20 years, our Guiding Principles of; doing the right thing, putting the customer...


  • South Jordan, United States Merrick Bank Full time

    Join our team - and take the next step in achieving a fulfilling career! What We Do At CardWorks, we aim to help people connect with possibility and opportunity using our financial servicing expertise. Building meaningful, long-term relationships with consumers, our employees, and our clients is what matters most. Who We Are CardWorks, Inc. is a diversified...


  • South Jordan, Utah, United States Merrick Bank Full time

    About the RoleWe are looking for a talented Offensive Security Engineer I to join our team at Merrick Bank. This role offers the opportunity to work on various aspects of information security, including application and development security, application penetration testing capabilities, and cloud infrastructure/platform security.Key Responsibilities:Red Team...


  • South Jordan, Utah, United States Merrick Bank Full time

    About Merrick BankMerrick Bank is a leading financial institution, committed to delivering exceptional customer experiences. We are seeking a highly skilled Senior Security Engineer to join our team.This role requires a strong understanding of security concepts, defense-in-depth strategies, and security tools. The ideal candidate will have 6+ years of...


  • South Jordan, Utah, United States Merrick Bank Full time

    Job SummaryWe are seeking a highly skilled Senior Security Engineer to join our team at Merrick Bank. This role requires a strong background in cybersecurity engineering, with a focus on security monitoring and incident response.The ideal candidate will have 6+ years of experience in cybersecurity engineering, with a strong understanding of security...


  • South River, New Jersey, United States Arrow Security Full time

    Job Title: Full-Time Security OfficerLocation: South River, NJEstimated Salary: $19.00 per hourAbout the Job:We are seeking a highly skilled and motivated security officer to join our team at Arrow Security. As an unarmed security supervisor, you will be responsible for ensuring the safety and security of our clients and their...


  • South River, New Jersey, United States Arrow Security Full time

    Company Overview:Arrow Security is a leading provider of security services in the region. Our team of experienced professionals is dedicated to delivering high-quality security solutions that meet the unique needs of our clients.Our Services:Unarmed Security GuardsArmed Security GuardsSecurity ConsultingSecurity TrainingSalary: $19.00 per hourLocation: South...


  • South Jordan, United States Merrick Bank Full time

    Join our team - and take the next step in achieving a fulfilling career! What We Do At CardWorks, we aim to help people connect with possibility and opportunity using our financial servicing expertise. Building meaningful, long-term relationships with consumers, our employees, and our clients is what matters most. Who We Are CardWorks, Inc. is a diversified...


  • South San Francisco, California, United States Inter-Con Security Full time

    About UsInter-Con Security Systems, Inc. is a leading US-owned security company providing integrated security solutions to government and commercial customers worldwide. With over 25,000 security officer personnel, we pride ourselves on delivering exceptional service and support to our clients.As an equal opportunity employer, we value diversity and welcome...


  • South San Francisco, United States Inter-Con Security Full time

    Company Overview:Founded in 1973, Inter-Con Security Systems, Inc. is a leading US-owned security company, providing integrated security solutions to government and commercial customers on four continents. Inter-Con remains under family ownership and control and operates as the industry leader in the field of customized, high-requirement security solutions....


  • South Jordan, Utah, United States Creative Financial Staffing Full time

    IT Network and Security Engineer Job SummaryWe are seeking a talented IT Network and Security Engineer to join our team in Hartford, CT. The successful candidate will have a strong background in network security systems and excellent knowledge of network segmentation/traffic and SD-WAN.Key ResponsibilitiesThe IT Network and Security Engineer will be...


  • South Jordan, United States Merrick Bank Full time

    Merrick Bank employees share in our mission to delight our customers and empower underserved consumers to achieve their credit goals. In return, we delight our associates; ensuring they are noticed, heard, appreciated and understand the importance of their role(s). For over 20 years, our Guiding Principles of; doing the right thing, putting the customer...

  • Security Officer

    1 month ago


    South Tucson, United States GardaWorld Security Services U.S. Full time

    Job Description:GardaWorld – Security ServicesSecurity Officer – Now Hiring!Guard Card RequiredYou’ve got the right skills. What you need is the right opportunity to unleash your potential. We agree, and we’re hiring!Every day is different at GardaWorld with diverse work assignments and flexible schedules. We are leaders in Professional training...

  • Security Officer

    3 weeks ago


    South Tucson, United States GardaWorld Security Services U.S. Full time

    Job Description:GardaWorld – Security ServicesSecurity Officer – Now Hiring!Guard Card RequiredYou’ve got the right skills. What you need is the right opportunity to unleash your potential. We agree, and we’re hiring!Every day is different at GardaWorld with diverse work assignments and flexible schedules. We are leaders in Professional training...

  • Security Professional

    4 weeks ago


    South Tucson, Arizona, United States GardaWorld Security Services U.S. Full time

    Job OverviewGardaWorld Security Services U.S. is a leading provider of security solutions, and we're seeking highly skilled individuals to join our team as Special Response Officers in Tucson, AZ.Key Responsibilities:Provide rapid response in critical situationsObserve, survey the area and provide reporting on activity at assigned locationsEnforce customer...


  • South Jordan, Utah, United States Merrick Bank Full time

    About the RoleWe are seeking an experienced Cybersecurity Engineer Lead to join our team at Merrick Bank. This is a challenging and rewarding role that will require you to lead the development of advanced security solutions, collaborate with cross-functional teams, and stay up-to-date on the latest security threats and technologies.The estimated salary for...