Offensive Security Engineer

Who we are  We simplify wealth creation. Founded in 2014 in Vienna, Austria by Eric Demuth, Paul Klanschek and Christian Trummer, we’re here to help people trust themselves enough to build their financial freedom — for now and the future. Our user-friendly, trade-everything platform empowers both first-time investors and seasoned experts to invest in the cryptocurrencies, crypto indices, stocks, precious metals and commodities they want — with any sized budget, 24/7. Our global team works across different cultures and time zones, bringing our products to more than 6 million customers, making us one of Europe’s safest and most secure platforms that powers modern investing.   Headquartered in Austria but operating across Europe, our products are built by fast-moving, talented, “roll-up-your-sleeves-and-make-it-happen” kind of people. It’s these diverse perspectives and innovative minds operating as ONE TEAM that keep Bitpanda at the cutting edge of our industry. So if you’re someone who thinks big, moves fast and wants to make an impact right from day one, then get ready to join our industry-changing team. Let’s go!     Your missionAs an Offensive Security Engineer, you are part of our internal ethical hacking team. Your mission is to safeguard our platform and users by integrating security directly into our products from day one. You'll collaborate closely with engineers, product managers, and DevOps to design and deliver secure-by-default solutions. If you're passionate about security, love solving complex problems, and want to make an impact at scale, we’d love to meet you.    What you’ll do Perform deep-dive penetration tests across web apps, APIs, and infrastructure to uncover high-impact flaws. Develop proof-of-concept (PoC) exploits to help engineering teams visualize and prioritize critical security fixes. Partner with developers to provide technical remediation strategies and validate fixes through re-testing. Lead architectural reviews and threat modeling sessions to identify design flaws early in the software development lifecycle (SDLC). Build and integrate custom offensive tools and scripts into the development pipeline to scale vulnerability discovery. Stay ahead of the curve by researching emerging attack vectors, zero-days, and advanced adversary techniques.   Who you are You bring 4+ years of experience in application/product security testing Well-versed in common vulnerabilities (OWASP Top 10, SANS 25) and adept at helping teams prevent them One of the following cyber security certificates OSCP, BSCP, OSCE, GPEN, OSWE beneficial You can translate deep technical risks into actionable business insights for stakeholders at all levels. Driven by curiosity and excited to build, break, and secure systems used by millions of users   What’s in it for you Flexibility to work where you thrive – Enjoy the freedom of our Hybrid working model, combining onsite collaboration and remote work, with an additional 25 days per year to work from a city or country of your choice. Reward for your impact – Receive a competitive total compensation package aligned with Bitpanda’s pay-for-impact policy, including participation in our stock option plan. Support for your mental wellbeing – Access confidential coaching, counselling, and mental health resources whenever you need them through OpenUP. Time to recharge – Take extra time off to rest, reset, and recharge, with 3 additional days off in 2026 to prioritise your wellbeing. Continuous learning and growth – Grow your skills and stay ahead in your career with unlimited access to Udemy’s library of online courses at your own pace. Exclusive perks and rewards – Enjoy discounts, rewards, and perks from partners worldwide across life>        .…and even more location-specific benefits designed to make life at Bitpanda even more rewarding wherever you are.   Above all, you will have the opportunity to learn and grow as part of Bitpanda’s incredible journey towards being Europe’s ...