This is an on-site opportunity based in Naperville, Illinois, United States. The Senior Offensive Security Engineer, Commercial Products will perform hands-on offensive security testing across Ecolab’s commercial digital product portfolio, including web and mobile applications, APIs, cloud services, IoT platforms, PLC/IPC-connected equipment, embedded devices, and product integrations. This role focuses on technical testing of customer-facing products, while supporting offensive security engagements, mentoring engineers, and helping improve engagement scope, testing methods, reporting quality, remediation validation, and risk-based prioritization. You will partner with product security, application engineering, cloud engineering, IoT engineering, architecture, and business teams to identify vulnerabilities and strengthen the security maturity of Ecolab’s commercial offerings. Responsibilities include planning, scoping, and executing assessments to identify exploitable vulnerabilities, insecure configurations, weak access controls, exposed secrets, insecure APIs, cloud misconfigurations, and product-specific gaps; conducting safe, authorized testing of IoT and field-deployed equipment; and using tools such as Snyk, Wiz, Burp Suite, OWASP ZAP, GitHub Advanced Security, Nmap, Horizon3 NodeZero, and related technologies to identify and document security issues. You will also prepare clear, actionable reports, present findings to engineering and non-technical stakeholders, support threat modeling and secure architecture reviews, and contribute to vulnerability management, secure

This is an on-site opportunity based in Naperville, Illinois, United States. The Senior Offensive Security Engineer, Commercial Products will perform hands-on offensive security testing across Ecolab’s commercial digital product portfolio, including web and mobile applications, APIs, cloud services, IoT platforms, PLC/IPC-connected equipment, embedded devices, and product integrations. This role focuses on technical testing of customer-facing products, while supporting offensive security engagements, mentoring engineers, and helping improve engagement scope, testing methods, reporting quality, remediation validation, and risk-based prioritization. You will partner with product security, application engineering, cloud engineering, IoT engineering, architecture, and business teams to identify vulnerabilities and strengthen the security maturity of Ecolab’s commercial offerings. Responsibilities include planning, scoping, and executing assessments to identify exploitable vulnerabilities, insecure configurations, weak access controls, exposed secrets, insecure APIs, cloud misconfigurations, and product-specific gaps; conducting safe, authorized testing of IoT and field-deployed equipment; and using tools such as Snyk, Wiz, Burp Suite, OWASP ZAP, GitHub Advanced Security, Nmap, Horizon3 NodeZero, and related technologies to identify and document security issues. You will also prepare clear, actionable reports, present findings to engineering and non-technical stakeholders, support threat modeling and secure architecture reviews, and contribute to vulnerability management, secure