Member of Technical Staff (Offensive Security Engineer)

Responsibilities

• Plan and execute red team and purple team engagements simulating advanced threat actors across cloud infrastructure (AWS, Kubernetes), endpoints, and application surfaces
• Conduct continuous penetration testing of web applications, APIs, mobile clients, browser extensions, cloud infrastructure, and internal services
• Assess AI/ML-specific attack surfaces including prompt injection, model exfiltration, agent abuse, tool-use exploitation, and MCP security boundaries
• Develop and maintain custom offensive tooling, exploits, and automation to improve the efficiency and coverage of security testing
• Perform open-scope adversary simulations to test detection and response capabilities
• Drive threat modeling sessions with engineering teams to identify and prioritize attack vectors
• Deliver clear, actionable findings to technical and executive audiences and partner with engineering to validate remediations
• Contribute to the security of CI/CD pipelines, supply chain integrity, and secrets management

Requirements

• 5+ years of hands-on experience in offensive security, red teaming, or penetration testing
• Deep technical expertise in at least two areas: cloud security, web/API security, Kubernetes/container security, endpoint security, network penetration testing, or CI/CD security
• Track record of discovering impactful vulnerabilities or developing novel attack techniques
• Strong programming and scripting skills in Python, Go, or similar languages
• Experience with industry-standard offensive tools such as Burp Suite, Cobalt Strike, Metasploit, or BloodHound
• Experience assessing AI/ML systems, LLM applications, or agentic workflows
• Excellent written and verbal communication skills

Preferred Qualifications

• Published security research or conference talks (DEF CON, Black Hat, BSides)
• CVE credits or meaningful bug bounty contributions