Senior Security Engineer, Offensive Security

Role overview Lead internal offensive security testing across applications, APIs, cloud infrastructure, and corporate systems. The role combines hands-on penetration testing, code and architecture review, and close partnership with engineering teams to resolve findings. A major focus is moving from occasional assessments toward repeatable, continuous testing, including carefully evaluated AI-assisted methods.

Responsibilities - Plan and conduct penetration tests, prioritizing targets according to risk and business impact. - Agree on test scope and rules with system owners, assess production risk, and validate vulnerabilities using safe methods. - Combine practical testing with source-code and architecture review to identify weaknesses and demonstrate realistic attack paths. - Work with engineers to explain findings, agree on fixes, track remediation, and retest systems. - Turn confirmed risks into reusable tests and build workflows for ongoing testing and remediation validation. - Evaluate AI-assisted security tools and develop workflows for code analysis, test generation, and finding triage; assess their accuracy and effectiveness. - Coordinate independent third-party testing and follow its findings through remediation; share validated attack paths with detection and response teams.

Requirements - At least five years of relevant security engineering experience, including substantial hands-on penetration testing of applications and infrastructure. - Strong judgment in prioritizing tests, evaluating production impact, and validating vulnerabilities without unnecessary disruption. - Experience owning assessments from planning through engineering collaboration, remediation, and retesting. - Ability to write production-quality security tooling, review code, and navigate large codebases; independently assess proof-of-concept and AI-generated code. - Strong knowledge of application and API security, authentication and authorization, network security, and common vulnerability types.

Benefits and work setup - Base salary ranges from $184,000 to $250,000 per year, depending on location, plus bonus. - The role includes occasional off-hours incident response as part of a shared on-call rotation. - The work offers scope to build continuous testing practices and lead adoption of AI-assisted offensive security tools.