Offensive Security Engineer

Role overview Apply offensive security expertise to strengthen a cybersecurity product and help translate practical attack techniques into capabilities that can support automated red teaming and penetration testing. This is hands-on product engineering work, with regular collaboration and shipped implementation rather than a research-only focus.

Responsibilities - Assess and improve the security of the product and its operating environment against advanced threats. - Work with product engineers to implement and deliver offensive security capabilities. - Translate penetration testing and red-team tradecraft into approaches that can be adapted for automated system use. - Apply knowledge of enterprise security controls to inform how offensive techniques interact with defensive environments. - Keep current with evolving attack methods and incorporate relevant learning into practical work.

Requirements - At least five years conducting complex penetration testing assessments in commercial or government environments. - Deep hands-on understanding of modern offensive techniques, including in-memory and fileless methods, beacon object files, adaptable command-and-control, initial access, and endpoint detection bypasses. - Experience implementing or assisting with enterprise security controls such as malware protection, identity and access controls, detection engineering, or device management. - A clear interest in adapting AI to red teaming or penetration testing use cases. - Willingness to work extended hours and weekends as needed.

Nice to have - Interest in machine learning and generative AI methods such as agentic systems, tool calling, knowledge graph integration, or retrieval-augmented generation. - Ability to work with ambiguity and learn new technologies quickly.