Cloud / AI Security Engineer

Role overview This position sits on an offensive security team focused on cloud and AI/ML systems. The work blends hands-on adversarial testing of production environments with the engineering needed to turn one-off discoveries into repeatable safeguards. It is research-oriented in tone: finding novel failure modes before adversaries do, then making sure the findings drive change in the engineering teams that own the systems.

Responsibilities

- Probe cloud and AI/ML platforms end-to-end, simulating realistic adversaries against identities, workloads, models, and the data they touch. - Identify attack paths that existing controls miss, including failure modes without a documented mitigation. - Develop and maintain tooling that converts individual findings into continuous, automated checks. - Translate technical risk into clear, actionable guidance that product and platform engineers can implement. - Contribute to threat research and write-ups that push the team's understanding of emerging attack surfaces forward.

Requirements

- Deep working knowledge of cloud internals, including IAM, identity federation, and the techniques used to escalate privilege. - Hands-on experience with containers, Kubernetes, and infrastructure-as-code pipelines. - Practical machine-learning literacy sufficient to deliberately attack AI systems, not just understand them at a conceptual level. - Strong scripting ability and a habit of automating repetitive analysis and exploitation steps. - A track record of clear written communication, ideally demonstrated through a repository, research write-up, tool, or similar artifact submitted with the application.

Nice to have

- Published cloud attack research or open-source offensive tooling. - Detection engineering experience using cloud log sources. - Background applying security engineering to production machine-learning systems.

Benefits and work setup

- Remote-first, with the option to work from a physical office where one exists. - Independent organization structure, oriented around long-term retention rather than rapid turnover.