Offensive Security Engineer Jobs

About The Position

Requirements

• Significant experience participating in and leading offensive security operations, including penetration testing or red team engagements.
• Practical experience testing multiple technology domains, such as applications, APIs, cloud, identity, infrastructure, endpoints, mobile, wireless, or security controls.
• Working knowledge of AI and large language model security concepts, common attack surfaces, and risks introduced by models, data, agents, tools, and integrations.
• Proficiency in Python, C#, Go, PowerShell, or another language used for security tooling and automation.
• Strong written, presentation, and verbal communication skills, including the ability to explain highly technical issues to non-technical audiences.

Nice To Haves

• Industry-recognized offensive security certifications such as OSCP, OSEP, OSCE3, CRTO, GPEN, GXPN, PNPT, or comparable credentials.
• Experience building reusable automation, security testing frameworks, agentic workflows, or integrations that support offensive security operations.
• Experience assessing AI-enabled applications or platforms using adversarial testing techniques.
• Experience working in complex enterprise, cloud, manufacturing, product security, or globally distributed environments.

Responsibilities

• Plan, implement, lead, and report on internal and external penetration tests, red team operations, purple team exercises, and targeted security assessments.
• Discover, validate, and safely exploit vulnerabilities end to end across web applications, APIs, cloud platforms, identity systems, networks, endpoints, mobile applications, wireless environments, products, and security controls.
• Use AI-assisted workflows for reconnaissance, attack-path analysis, test-case development, code review, exploit research, tooling, evidence analysis, and reporting, independently validating AI-generated output.
• Develop, customize, and maintain offensive security tooling, scripts, automation, and proof-of-concept code to increase the scale, consistency, and repeatability of testing.
• Assess AI and machine learning systems when in scope, including model behavior, application logic, retrieval and data pipelines, agents and tools, access controls, integrations, guardrails, and infrastructure dependencies.
• Emulate realistic adversary tactics, techniques, and procedures to evaluate prevention, detection, investigation, and response capabilities while following approved rules of engagement.
• Evaluate proposed architecture and design decisions to identify attack paths, trust-boundary weaknesses, insecure assumptions, and gaps in secure design principles.
• Collaborate with multi-functional partners to explain findings, prioritize remediation, implement corrective actions, and translate technical risk into business impact.

Benefits

• Choice of medical plans.
• Choice of dental plans.
• Choice of vision plans.
• Programs that help protect income if unable to work due to illness or injury.
• Paid family leave.
• Paid time off.
• Paid holidays.