Senior Offensive Security Engineer
CoStar GroupVirginia, United States
Posted September 10, 2025
Full Time
About the Company
CoStar Group (NASDAQ: CSGP) is a global leader in commercial real estate information, analytics, online marketplaces and 3D digital twin technology. Founded in 1986, CoStar Group is dedicated to digitizing the world’s real estate, empowering all people to discover properties, insights, and connections that improve their businesses and lives. CoStar Group’s major brands include CoStar, a leading global provider of commercial real estate data, analytics, and news; LoopNet, the most trafficked commercial real estate marketplace; Apartments.com, the leading platform for apartment rentals; and Homes.com, the fastest-growing residential real estate marketplace. CoStar Group’s industry-leading brands also include Matterport, a leading spatial data company whose platform turns buildings into data to make every space more valuable and accessible, STR, a global leader in hospitality data and benchmarking, Ten-X, an online platform for commercial real estate auctions and negotiated bids and OnTheMarket, a leading residential property portal in the United Kingdom. CoStar Group’s websites attracted over 134 million average monthly unique visitors in the fourth quarter of 2024, serving clients around the world. Headquartered in Arlington, Virginia, CoStar Group is committed to transforming the real estate industry through innovative technology and comprehensive market intelligence. From time to time, we plan to utilize our corporate website as a channel of distribution for material company information. For more information, visit CoStarGroup.com.
Job Description
Senior Offensive Security Engineer position at CoStar Group. Lead purple team activities, plan external red team engagements, and oversee internal penetration testing efforts. Develop test plans to validate vulnerabilities and demonstrate exploitation. Collaborate with threat management and defensive blue teams.
Requirements
- Bachelor’s Degree from an accredited, not for profit university or college (preferably in a relevant field - Computer Science/Cyber Security)
- A track record of commitment to prior employers
- 3 years of experience performing offensive security activities such as red teaming, penetration testing, and vulnerability research
- 6 years of total experience in a technical role such as security, networking, systems, or software development
- Security certification such as OSEP, OSCP, CRTO, GXPN or similar certification
- Scripting/programming skills (Bash, Python, PowerShell)
- Experience planning and executing Red Team and Purple Team Scenarios
Benefits
- Comprehensive healthcare coverage: Medical / Vision / Dental / Prescription Drug
- Life, legal, and supplementary insurance
- Virtual and in person mental health counseling services for individuals and family
- Commuter and parking benefits
- 401(K) retirement plan with matching contributions
- Employee stock purchase plan
- Paid time off
- Tuition reimbursement
- On-site fitness center and/or reimbursed fitness center membership costs (location dependent), with yoga studio, Pelotons, personal training, group exercise classes
