Cloud Testing (Remote)

Trace3•Nashville, TN

4d•$170,000 - $220,000•Remote

About The Position

The Senior Architect, Offensive Security is a senior technical contributor who leads advanced offensive security engagements for Trace3 clients, primarily focused on cloud security testing—particularly Microsoft Azure, Entra ID, and Microsoft 365—and AI/LLM security testing. The role uncovers vulnerabilities and realistic attack paths in cloud and AI-enabled environments through manual, adversary-minded testing beyond automated scanning, and provides clear, actionable remediation guidance. The Senior Architect plans, executes, and reports on complex assessments, serves as a technical escalation point for the team, and helps develop testing methodologies for cloud and AI service offerings. General internal and external network and web application penetration testing experience is valued and may also be used. Mobile application testing experience is a plus. Building trusted client relationships and enabling client success are key parts of the position.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or a related technical field, or equivalent professional experience.
At least 8 years of hands-on offensive security experience.
Deep expertise in cloud penetration testing, preferably with Azure, Entra ID, and Microsoft 365.
Hands-on experience testing AI/LLM applications and agentic systems.
Strong understanding of cloud identity and access management, including OAuth 2.0, OpenID Connect, SAML, conditional access, and token-based authentication.
Working knowledge of how LLM applications are built and deployed, including RAG architectures, embeddings and vector stores, tool-calling, and model hosting platforms.
Proficiency in scripting and development using languages such as Python, PowerShell, Go, or Bash.
Solid foundation in traditional network, Active Directory, and web application penetration testing and common tools such as Burp Suite, BloodHound, and Metasploit.
Excellent written communication skills and ability to produce clear, client-ready reports.
Excellent oral communication and presentation skills, including presenting findings to C-level executives and non-technical audiences.
Strong organization, attention to detail, and time management; ability to prioritize effectively in a fast-paced, high-volume, evolving environment.
Ability to approach client requests proactively and consultatively, understand client needs, and deliver effectively.
Comfort managing multiple and changing priorities and meeting deadlines in an entrepreneurial environment.
Self-starter who enjoys solving challenging problems and is comfortable working directly with clients.
Ability to travel when needed.

Nice To Haves

Cloud-focused certifications such as CARTP, CARTE, GCPN, or AZ-500.
Offensive security certifications such as OSCP, OSEP, OSWE, OSAI, HTB COAE, or GXPN.
Hands-on AWS and/or GCP security testing experience in addition to Azure.
Experience testing agentic AI systems, including Model Context Protocol integrations and multi-agent workflows.
Mobile application penetration testing experience for iOS and Android using tools such as Frida, Objection, MobSF, or jadx, aligned to OWASP MASVS and MASTG.
Mobile-focused certifications such as GMOB or eMAPT.
Published security research, CVEs, conference talks, or contributions to open-source offensive tooling.
Experience with red team operations or adversary emulation.

Responsibilities

Lead and execute cloud security assessments and penetration tests, primarily across Microsoft Azure, Entra ID, and Microsoft 365, and AWS or GCP where applicable.
Test cloud identity and privilege-escalation risks, tenant and subscription attack paths, managed identities, Key Vault, storage, serverless, and container workloads such as AKS.
Identify and exploit cloud identity weaknesses, including conditional access gaps, OAuth application and consent abuse, token theft and replay, and hybrid identity attack paths.
Assess cloud DevOps and infrastructure-as-code environments for pipeline compromise, secrets exposure, and privilege-escalation paths.
Assess AI/ML and LLM applications and agentic systems for issues such as prompt injection, jailbreaking, sensitive data leakage, insecure output handling, excessive agency, RAG pipeline weaknesses, and model supply-chain risk.
Assess cloud platforms and infrastructure hosting AI workloads for access controls, data exposure, network isolation, and integrations with enterprise data sources.
Lead engagements by defining testing approaches and rules of engagement, coordinating with client stakeholders, and directing and supporting other testers.
Produce reports communicating attack narratives, risk ratings, evidence, and prioritized remediation guidance, and present findings to technical and executive audiences.
Develop and maintain testing methodologies, playbooks, and checklists for cloud and AI security testing.
Develop scripts, tools, and automation to streamline testing and internal processes.
Research emerging cloud and AI security attack techniques and share findings through internal enablement, blog posts, and conference presentations.
Mentor junior and mid-level team members and provide technical quality reviews of their work.
Assist in designing and maintaining internal lab infrastructure for offensive security research, development, and testing.