The Lead Offensive Security Engineer will lead hands-on offensive security testing across Ecolab’s commercial digital product portfolio. This role focuses on technical testing of customer-facing products, including web and mobile applications, APIs, cloud services, IoT platforms, PLC/IPC-connected equipment, embedded devices, and product integrations. The Lead Offensive Security Engineer will actively perform security testing while also leading a small internal team, defining engagement scope, testing methods, reporting standards, remediation validation, and risk-based prioritization. This role will partner closely with product security, engineering, architecture, cloud, IoT, legal/compliance, and business stakeholders to identify vulnerabilities before they are discovered externally and to improve the security maturity of Ecolab’s offerings.

What you will do: - Lead and perform hands-on offensive security testing across commercial products (web, mobile, APIs, cloud services, IoT platforms, embedded devices, product integrations). - Plan, scope, and execute technical assessments focused on exploitable vulnerabilities, attack paths, insecure configurations, weak access controls, exposed secrets, insecure APIs, cloud misconfigurations, and product-specific security gaps. - Lead a small internal offensive security team while remaining hands-on in day-to-day testing, analysis, documentation, and remediation validation. - Develop repeatable red team and offensive testing methods, engagement rules, reporting standards, evidence expectations, and

The Lead Offensive Security Engineer will lead hands-on offensive security testing across Ecolab’s commercial digital product portfolio. This role focuses on technical testing of customer-facing products, including web and mobile applications, APIs, cloud services, IoT platforms, PLC/IPC-connected equipment, embedded devices, and product integrations. The Lead Offensive Security Engineer will actively perform security testing while also leading a small internal team, defining engagement scope, testing methods, reporting standards, remediation validation, and risk-based prioritization. This role will partner closely with product security, engineering, architecture, cloud, IoT, legal/compliance, and business stakeholders to identify vulnerabilities before they are discovered externally and to improve the security maturity of Ecolab’s offerings.

What you will do: - Lead and perform hands-on offensive security testing across commercial products (web, mobile, APIs, cloud services, IoT platforms, embedded devices, product integrations). - Plan, scope, and execute technical assessments focused on exploitable vulnerabilities, attack paths, insecure configurations, weak access controls, exposed secrets, insecure APIs, cloud misconfigurations, and product-specific security gaps. - Lead a small internal offensive security team while remaining hands-on in day-to-day testing, analysis, documentation, and remediation validation. - Develop repeatable red team and offensive testing methods, engagement rules, reporting standards, evidence expectations, and