InfoSec Expert

ESRhealthcare and EXEC STAFF RECRUITERS • Nyc, NY

2d • Remote

About The Position

This role involves designing and defining comprehensive red-teaming workflows and adversarial scenarios targeting SaaS and cloud-based environments. The InfoSec Expert will conduct hands-on penetration testing and adversarial threat modeling across platforms such as Microsoft 365, Google Workspace, Slack, GitHub, and Snowflake. The role also includes acting as a senior reviewer, critically evaluating the quality and depth of red-teaming exercises and deliverables, and identifying potential vectors for misuse or manipulation of AI agents. The expert will contribute practical insights for developing and vetting security controls, policies, and detection strategies, and collaborate with other cybersecurity professionals, providing detailed feedback. Additionally, the role supports benchmarking initiatives by creating adversarial scenarios that reflect contemporary threats and attack methodologies.

Requirements

• Extensive hands-on experience in security domains such as red teaming, penetration testing, application/cloud security, or security engineering.
• Deep understanding of enterprise SaaS security concepts including identity, RBAC/permissions, and data governance.
• Direct familiarity with Microsoft 365, Google Workspace, Slack, GitHub, and Snowflake from a security evaluation perspective.
• Demonstrated ability to think adversarially about how AI and SaaS platforms could be exploited or compromised.
• Strong written and verbal communication skills, enabling clear articulation of complex security issues and recommended remediations.
• Proven track record of practical, real-world impact in security projects—beyond simply listing experience on a resume.

Nice To Haves

• Prior experience in AI/LLM security or adversarial testing of agent-based systems.

Responsibilities

• Design and define comprehensive red-teaming workflows and adversarial scenarios targeting SaaS and cloud-based environments.
• Conduct hands-on penetration testing and adversarial threat modeling across platforms such as Microsoft 365, Google Workspace, Slack, GitHub, and Snowflake.
• Act as a senior reviewer, critically evaluating the quality and depth of red-teaming exercises and deliverables.
• Identify and document potential vectors for misuse or manipulation of AI agents, including prompt injection, privilege escalation, data exfiltration, and destructive actions.
• Contribute practical insights for developing and vetting security controls, policies, and detection strategies relevant to real-world SaaS environments.
• Collaborate with other cybersecurity professionals, providing detailed written and verbal feedback on findings and improvements.
• Support benchmarking initiatives by creating adversarial scenarios that reflect contemporary threats and attack methodologies.

What This Job Offers

• Career Level: Senior
• Education Level: No Education Listed