Offensive Security Engineer

Staris AI•Seattle, WA

1d•Remote

About The Position

At Staris AI, we are revolutionizing application security with our AI-powered penetration testing platform. We continuously validate and remediate real attack paths in running applications, aiming to transform the indefensible into the impenetrable. As an Offensive Security Engineer, you will be at the forefront of this innovation, contributing to the advancement of automated software attack and simulation through your expertise in threat simulation and attack automation. This role involves owning the execution and quality of autonomous security assessments, driving improvements in AI-driven attack simulations, and applying offensive security expertise to identify and validate realistic attack paths in modern application and cloud environments. You will collaborate with engineering and research teams to operationalize new attack techniques and enhance the platform's autonomous testing capabilities, using insights to refine assessment logic and remediation quality.

Requirements

Minimum of 5 years of experience in application security assessment, source code auditing, bug hunting or similar areas
Knowledge of offensive application security fundamentals
Knowledge of relevant open-source technologies for attack automation (e.g. Tools, Libraries, Frameworks, etc.)
Experience working with relevant software assessment technologies (e.g. SAST, DAST, Fuzzing, etc.).
Prior emphasis on distributed systems and micro-service architectures
Familiarity with prompt engineering, generative AI models, and their APIs
Bachelor's degree in a related field (e.g. Computer Science, Information Technology, Cybersecurity, etc.)
Strong English language communication skills

Responsibilities

Own the execution and quality of autonomous security assessments, ensuring results are accurate, validated, and actionable for customers.
Drive the continuous improvement of AI-driven attack simulations and automated exploitation workflows to expand coverage, reliability, and assessment depth.
Apply offensive security expertise to identify realistic attack paths, validate findings, and reduce false positives across modern application and cloud environments.
Partner with engineering and research teams to operationalize new attack techniques and strengthen the platform’s autonomous testing capabilities.
Use insights from diverse target environments and customer feedback to improve assessment logic, remediation quality, and overall platform effectiveness.