Job description

We are looking for an Ethical Hacker / Offensive Security Engineer to strengthen our offensive security at StrangeBee.

In this role, you will identify, exploit, analyze, and help remediate vulnerabilities across our products, infrastructure, internal systems, and security processes. You will work closely with Engineering, Product, SOC, Compliance & Risk, and Infrastructure teams to embed security into our software development lifecycle and day-to-day operations.

You will also contribute to security culture, support incident investigations, train developers, conduct research, and help shape the offensive security roadmap. Your work will directly improve the security, resilience, and trustworthiness of our incident response platform used by security teams around the world.

Responsibilities

• Lead and perform offensive security assessments, including web application, API, infrastructure, cloud, and internal system penetration tests.

• Identify, exploit, document, and prioritize vulnerabilities with clear technical and business impact.

• Work closely with Engineering teams to help remediate vulnerabilities and improve secure development practices.

• Contribute to the Secure Development Lifecycle by integrating security reviews, threat modeling, secure coding guidance, and vulnerability management into engineering workflows.

• Support security incident investigations by providing offensive security expertise, attack path analysis, forensic reasoning, and adversarial thinking.

• Conduct vulnerability research on our products, dependencies, environments, and emerging attack techniques.

• Participate in CTFs, bug bounty-style research, labs, and internal security challenges to continuously sharpen offensive capabilities.

• Build internal tools, scripts, PoCs, and automation to improve security testing, vulnerability analysis, and detection capabilities.

• Contribute to the security roadmap, both in run activities and build initiatives.

• Help improve vulnerability management processes: qualification, severity assessment, remediation tracking, validation, and reporting.

• Deliver security awareness sessions and hands-on training for developers and technical teams.

• Promote a strong security culture based on collaboration, curiosity, pragmatism, and continuous improvement.

• Collaborate with SOC, Compliance & Risk, Infrastructure, Product, and Engineering teams to align offensive security work with business priorities and customer trust.

Success criteria (6 to 12 months)

• Performed several high-quality offensive security assessments with clear, actionable, and well-prioritized findings.

• Demonstrated strong autonomy in identifying, validating, documenting, and following up on vulnerabilities.

• Vulnerability reports are precise and useful for both engineering and leadership audiences.

• Contributed to improving remediation velocity and security awareness within Engineering teams.

• Helped strengthen the Secure Development Lifecycle through security reviews, threat modeling, or tooling.

• Delivered at least one meaningful internal security training, workshop, or awareness initiative.

• Contributed to the offensive security roadmap with concrete improvements, tooling, research, or process enhancements.

• Recognized by the team as a trusted, collaborative, and pragmatic teammate.

Requirements

Technical skills

Hiring process

1. Discovery call with the hiring team (30 minutes)

2. Interview with the VP of Infrastructure & Security and the COO & co-founder (1 hour)

3. AssessFirst personality assessment

4. Interview with the Security team (1 hour)

5. Interview with the Head of Product and an Engineering Manager (1 hour)

6. Interview with the Head of HR (30 minutes)

About us

StrangeBee is a European cybersecurity software company specializing in Incident Response.

Founded in 2018 by the creators of TheHive and Cortex, StrangeBee was built on the success of these tools that quickly became widely adopted within the cybersecurity community. What started as open-source initiatives evolved into enterprise-grade solutions trusted by organizations worldwide.

Today, TheHive is recognized as a leading incident response platform, empowering thousands of security analysts to detect, investigate, and respond to cyber threats efficiently.

StrangeBee now operates as a fully commercial software vendor, focused on delivering robust, scalable, and continuously evolving solutions tailored to the needs of modern security teams.

Our ambition is clear: strengthen our product ecosystem, meet the fast-growing demands of the cybersecurity market, and establish StrangeBee as a global leader in incident response platforms.

We are growing fast and we’re looking for people who want to grow with us.

Why join us

Customer Centric. We build for real security teams facing real threats, focused on delivering meaningful value.

Quest for Excellence. We continuously raise the bar on how we work, collaborate, and improve our product.

Embrace Change. We encourage initiative and constructive challenge. If you see something to improve, speak up.

One Team. We foster trust, open communication, and psychological safety. Everyone's voice matters.

Joining StrangeBee means real ownership, high standards, visible impact — and a team that genuinely supports each other.