Senior Offensive Security Engineer, SPAN
$138-184k
+ equity
Electrical equipment manufacturer
Job no longer available
Electrical equipment manufacturer
201-500 employees
Job no longer available
$138-184k
+ equity
201-500 employees
Company mission
To enable homes to get clean energy faster, cheaper and more easily. Impacting climate change is our passion.
Role
Who you are
- Experience: 6+ years of professional experience in offensive security (penetration testing, red teaming), dedicated technical incident response, or a closely related field
- Incident Response (IR) Mastery: Demonstrated experience executing the full IR lifecycle (e.g., NIST SP 800-61 or SANS frameworks) and managing critical security breaches under high-pressure conditions
- DFIR & Log Analysis: Strong capability in parsing complex log data, analyzing system telemetry, and leveraging forensics techniques to track adversarial movement across a network
- Cloud Security: Advanced hands-on experience exploiting and securing modern cloud infrastructure , containerized environments (Docker/Kubernetes), and complex IAM policies
- Application Hacking: Deep technical expertise in web application and API security, including a masterful understanding of the OWASP Top 10 and complex business logic flaws
- Automation & Scripting: Decent programming proficiency in Python, Go, or Bash for developing custom exploitation tools, automating proofs-of-concept, and parsing security logs
- Breaker Mindset: A proven track record of finding critical vulnerabilities (via bug bounties, VDPs, or professional engagements) paired with the analytical, defensive mindset required to hunt threats and isolate incidents
What the job involves
- We are looking for a hands-on individual with an offensive security engineering mindset to join us as a Senior Offensive Security Engineer (Threat & Response) as part of the Security team at SPAN
- In this role, you will act as our internal ethical hacker, conducting full-scope, threat intelligence-informed adversary emulations across our cloud infrastructure, proprietary applications, and corporate IT assets
- We are looking for someone who can continuously simulate real-world cyber attacks to identify vulnerabilities before malicious actors do, while seamlessly leading the full Technical Incident Response (IR) lifecycle, from initial triage and containment through to eradication and post-incident recovery, when security events occur
- Execute full-scope adversary emulations against any valuable objectives across SPAN's cloud environments , proprietary web/mobile applications, APIs, and corporate IT infrastructure
- Lead Technical Incident Response operations during live security events, leveraging your understanding of attacker TTPs to direct rapid containment, threat eradication, and system recovery
- Provide a crucial feedback loop to our Cloud Infrastructure and Software Engineering teams by translating offensive findings into proactive detection rules and actionable hardening requirements
- Own the end-to-end VDP pipeline, serving as the primary internal owner for our public vulnerability disclosure channel, managing communications with external researchers, and validating incoming reports
- Build automated scripts and tools to streamline continuous internal security testing, vulnerability scanning, and VDP triage workflows
- Utilize frameworks like MITRE ATT&CK to design and execute red team scenarios that rigorously test the organization’s live detection capabilities, defense evasion thresholds, and IR readiness
- Develop and maintain Incident Response playbooks and runbooks to standardize our technical response to cloud, application, and infrastructure breaches
- Conduct root-cause analysis and digital forensics post-incident to reconstruct attacker timelines, identify Indicators of Compromise (IoCs), and perform comprehensive post-incident reviews
Our take
SPAN helps homeowners looking to improve their energy resilience by replacing electric panels, many of them decades old, with a flexible smart panel that helps users monitor and control their energy usage from a single app.
Founded in 2018, SPAN has made great strides in both price and technological development and won the International Builders' Show 2022 Best Energy Efficient Product award for its Gen 2 smart Panel. Alongside this, significant funding rounds have propelled product development, including a future-looking integration of its equipment with that of solar inverter, battery, and EV charger manufacturers.
This fast-developing and innovative home-energy solution directly responds to rising demand for efficiency, a momentum first highlighted by SPAN's 2024 partnership with PulteGroup. That progress has continues with the launch of two new models (the SPAN Panel MAIN 16 and MLO 24) which expand the company's line up and offer more affordable, flexible options for projects like solar, EV charging, and home electrification. Together, with existing panels, these additions reinforce SPAN's mission to deliver, smart, scalable energy systems.
Kirsty
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 6 rounds)
Jan 2026
$163.3m
LATE VC
Apr 2023
$96m
SERIES B
Total funding: $393.1m
Company benefits
- Competitive compensation
- Comprehensive benefits
- Team building and career growth
- Flexible paid time off
Company HQ
Potrero Hill, San Francisco, CA
Leadership
Arch Padmanabhan Rao
(Founder & CEO )After graduating from Stanford with an MS in Mechanical Engineering, Arch was an Energy Consultant for LCG Consulting and Technical Advisor for The Westly Group. They co-founded Verdigris, which used AI to eliminate electricity waste and was the Head of Products, Application and Sales engineering at Tesla Motors before founding Span.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 11 more jobs at SPAN