Senior Offensive Security Engineer

This position requires access to or use of information which is subject to export restrictions, including the International Traffic in Arms Regulations (ITAR). All applicants for this position must be "U.S. Persons" within the meaning of the ITAR. "U.S. Persons" include U.S. Citizens, U.S. Lawful Permanent Residents (i.e. 'Green Card Holders'), Political Asylees, Refugees or other protected individuals as defined by 8 U.S.C. 1324b(a)(3)’.

This position can be based out of any of our office locations in Austin, TX;
Madison, WI;
Morrisville, NC; or Hillsboro, OR, with a hybrid or onsite work arrangement.

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

You have spent years learning how systems break, and you have gotten good at finding those weak points before someone else does. You approach security testing with curiosity and rigor, not just running scans but understanding the context behind what you find. When you identify a vulnerability, you think about the business impact and how to explain it in a way that helps teams actually fix it.

You understand that effective security work is as much about collaboration as it is about technical skill. You have worked with engineering teams who do not live in security every day, and you have learned how to communicate findings in a way that builds trust rather than defensiveness. You ask good questions, you listen, and you help people understand not just what is broken but why it matters.

• Conduct penetration testing across Synopsys applications and infrastructure, identifying vulnerabilities and working with engineering and operations teams to develop practical remediation plans
• Build and deploy autonomous security testing solutions using AI to help scale vulnerability detection across the organization, exploring new ways to improve coverage and efficiency
• Perform attack surface reviews of critical systems, recommending defense strategies that help prevent exploits and improve overall security resilience
• Analyze security test data to support root cause analysis, collaborating with development and infrastructure teams to understand vulnerabilities and address underlying issues
• Monitor vulnerability disclosure feeds and threat intelligence sources, helping the team stay informed about emerging threats and prioritize testing efforts accordingly
• Work with cross-functional security, engineering, and cloud operations teams on security initiatives, aligning testing activities with broader organizational goals
• Deliver clear, actionable assessment reports to stakeholders, translating technical findings into language that makes sense for different audiences across the organization

• Help reduce security risk across Synopsys infrastructure and applications by identifying vulnerabilities and supporting teams in addressing them effectively
• Contribute to building security capabilities that can operate at greater scale and speed through AI-driven testing approaches
• Support stronger defenses across cloud and on-premises environments by recommending security controls based on real-world testing insights
• Help engineering teams respond more effectively to vulnerabilities by providing clear analysis and practical remediation guidance
• Improve organizational awareness of emerging threats by translating external intelligence into relevant testing priorities and defensive considerations
• Contribute your testing expertise to help shape security practices and standards that reflect real-world attack patterns and risks
• Play a role in protecting the intellectual property and infrastructure that supports semiconductor innovation for customers worldwide

• 8+ years of hands-on experience performing penetration testing at both application and infrastructure levels, ideally in enterprise environments
• Experience building autonomous security solutions, particularly using AI or machine learning to enhance vulnerability detection and testing workflows
• Strong working knowledge of security testing and analysis tools such as Burp Suite, Metasploit, Cobalt Strike, Blood Hound, or similar platforms
• Experience conducting security assessments in cloud environments including AWS, Azure, or GCP, with understanding of cloud-specific security considerations
• Solid knowledge of vulnerability frameworks including CVSS, OWASP Top 10, MITRE ATT&CK, and how to apply them in practical testing scenarios
• Software development experience in C/C++, Java, or Python, with ability to write scripts, automation tools, and work with code at a technical level
• Bachelor's degree in Computer Science, Cybersecurity, or…