Sr. Penetration Testing and Cloud Automation Engineer

<p>About Us:<br/>We are the leader in human-centric cybersecurity. Half a million customers, including 87 of the Fortune 100, rely on Proofpoint to protect their organizations. We’re driven by a mission to stay ahead of bad actors and safeguard the digital world. Join us in our pursuit to defend data and protect people.</p><p><br/>How We Work:<br/>At Proofpoint, you’ll be part of a global team that breaks barriers to redefine cybersecurity, guided by our BRAVE core values: Bold in how we dream and innovate, Responsive to feedback, challenges, and opportunities, Accountable for results and best-in-class outcomes, Visionary in future-focused problem-solving, Exceptional in execution and impact.</p><p><b><u>Corporate Overview</u></b><br/>Proofpoint is a leading cybersecurity company protecting organizations’ greatest assets and biggest risks: vulnerabilities in people. With an integrated suite of cloud-based solutions, Proofpoint helps companies around the world stop targeted threats, safeguard their data, and make their users more resilient against cyber-attacks. Leading organizations of all sizes, including more than half of the Fortune 1000, rely on Proofpoint for people-centric security and compliance solutions mitigating their most critical risks across email, the cloud, social media, and the web.<br/> </p><p>We are singularly devoted to helping our customers protect their greatest assets and biggest security risk: their people. That’s why we’re a leader in next-generation cybersecurity. Protection Starts with People.  #Proofpoint.<br/><br/><br/><b>The Role</b></p><p>We are looking for a highly skilled and experienced Senior Security Engineer with a strong focus on Penetration Testing and Cloud Security Automation/DevSecOps to join our Security Engineering team.<br/> </p><p>In this role, you’ll lead internal penetration testing efforts and red-team style assessments of critical infrastructure and applications, enabling secure-by-default infrastructure and secure software delivery pipelines. You will also apply your expertise in scripting, <span>infrastructure-as-code</span> (IaC), and cloud-native security practices to improve posture, visibility, and response.<br/> </p><p>Based in Cork, Ireland this key role will drive key Cloud/Data Centre security initiatives for Proofpoint Product portfolio. This is a high-impact role where you’ll help define and execute both the offensive testing strategy and defensive automation roadmap. You’ll be a go-to expert in uncovering vulnerabilities and building durable controls to prevent their exploitation at scale.</p><p></p><p><br/><b>Key Responsibilities</b></p><ul><li><p>Penetration Testing &amp; Offensive Security:</p><ul><li><p>Design and execute targeted internal red team / penetration tests across infrastructure, SaaS, APIs, and cloud environments</p></li><li><p>Perform manual and automated testing to simulate real-world attack scenarios, including lateral movement and privilege escalation</p></li><li><p>Collaborate with engineering teams to remediate findings through secure architecture and configuration<br/> </p></li></ul></li><li><p>Perform application security testing (black-box, grey-box, and white-box), including SAST, DAST, and manual review</p></li><li><p>Conduct red-team and purple-team exercises to simulate attacker behaviours and validate detection/resilience capabilities</p></li><li><p>Support the development of exploit POCs, custom tooling, and automation pipelines for recurring testing scenarios</p></li><li><p>Security Automation &amp; DevSecOps: Architect and build scalable cloud security automation pipelines from first principles, Develop and maintain Terraform modules, CI/CD integrations, and IaC security gates, Build and operate security data pipelines to ingest and analyse scan and detection data at scale</p></li><li><p>Architect, build, and maintain security data pipelines to ingest, normalize, and analyse telemetry at scale</p></li><li><p>Lead or contribute to threat modelling, risk assessments, and security architecture reviews.</p></li></ul><p><br/><b>What You Bring to the Team</b></p><ul><li><p>Extensive experience in Offensive Security, DevSecOps, security engineering roles</p></li><li><p>Penetration testing experience across infrastructure, cloud services, and web applications</p></li><li><p>Familiarity with tools such as: Burp Suite, Metasploit, Nmap, OSINT, BloodHound, Prowler, Kube-hunter, or custom scripts</p></li><li><p>Solid understanding of MITRE ATT&amp;CK, OWASP Top 10, CWE, and cloud attack paths</p></li><li><p>Thorough understanding of AWS, Azure, or GCP security models, IAM, and threat surfaces</p></li><li><p>Proven ability to build cloud-native security automation using Terraform (IaC), CI/CD tools and pipelines, Python/Go/Bash</p></li><li><p>Excellent communication and collaboration skills with the ability to drive cross-functional initiatives.</p></li></ul><p><br/><b>Beneficial Experience</b></p><ul><li><p>Experience with S