Staff Offensive Security Engineer

Remote: yes Posted: 2026-08-31

Greenlight is a family technology company on a mission to help families raise financially smart kids and navigate life together. Its suite of products — including the Greenlight app, debit card, Safe Family GPS trackers, and Family Hub — brings together financial tools, safety features, and everyday family management in one connected experience. Designed for busy families who want convenience without compromise, Greenlight continues to innovate alongside the evolving needs of modern life. Today, more than 6.5 million family members trust Greenlight to stay in sync. At Greenlight, we're here to make the day-to-day easier and futures brighter, so families can spend less time managing life, and more time living it. That's why we get out of bed every morning.

Greenlight is looking for a Staff Offensive Security Engineer for our Security team. This individual will be responsible for the continuous offensive security validation across our consumer digital platforms, mobile applications, cloud infrastructure, internal corporate environments, and emerging hardware device lines. The Staff Offensive Security Engineer will drive the long-term technical strategy for offensive security, lead complex red teaming and multi-stage adversary simulations, manage deep-dive vulnerability research into high-risk areas, champion a culture of security-minded development across the R&D organization, and establish automated security guardrails and self-healing infrastructure within a fintech environment.

- Lead Technical Strategy: Define the long-term vision for offensive security at Greenlight, moving beyond point-in-time testing to continuous security validation.

- Red Teaming & Adversary Simulation: Design and execute complex, multi-stage adversary simulations targeting our cloud infrastructure (AWS), mobile applications (iOS/Android), and internal corporate environments.

- Vulnerability Research: Conduct deep-dive research into high-risk areas of our ecosystem, identifying zero-day vulnerabilities or sophisticated logic flaws that automated tools miss.

- Pave the "Golden Path": Partner with DevOps and Engineering to build automated security guardrails and "self-healing" infrastructure that prevents common attack vectors from being introduced.

- Incident Response Support: Work closely with the Detection and Response team to improve our monitoring capabilities by performing "purple team" exercises to validate alert coverage.