Note: The job is a remote job and is open to candidates in USA. The confidential client is hiring a Staff Offensive Security Engineer to expand its red team program and build AI-assisted security testing capabilities. The role leads offensive operations, develops reusable tools and agent workflows, and turns findings into practical fixes and risk guidance for engineering and executive leaders.
Responsibilities
- Plan and lead red team engagements and adversary emulation modeled on real threat actors and current tradecraft
- Show how weaknesses chain across teams and systems into business impact
- Turn findings into risk-ranked remediation, with a fix or pull request the owning team can adopt as-is or build on
- Contribute as an SME on security analysis during severe incidents and design the durable control changes that follow
- Evolve the program's strategy, rules of engagement, and cadence with system owners, defenders, and incident responders
- Define how we measure exposure across teams, and give leaders the evidence to fund, fix, or accept risk
- Turn recurring weaknesses into secure defaults and paved roads
- Build reusable attack tooling and infrastructure so the program outlasts any single engagement
- Mentor engineers and grow offensive skills across security and engineering
- Design and ship an agent harness for offensive security work, with the safety controls, evaluation, and audit trail other engineers need to trust it
- Turn common offensive tasks into agent workflows other engineers can run and extend
- Red team AI systems, including agents and the tools they call
- Set AI security standards and make build-or-buy recommendations on AI security tooling
- Hold AI-generated output to the same review bar as human work
Skills
- Work Requirements: U.S. Citizen, GC Holders, or Authorized to Work in the U.S
- An operator who has run real offensive engagements
- A leader who understands the practical dynamics of a red team program
- A software engineer who builds AI-driven tools other engineers trust
- 12+ years in security, with significant hands-on offensive experience: red teaming, penetration testing, adversary emulation, vulnerability research
- Strong software engineering in Python, Go, or Rust, with tools in production that other people depend on
- Hands-on experience building with LLMs and agents, including the controls that keep an agent within its authorized scope
- Deep expertise attacking cloud infrastructure and identity, such as AWS and Kubernetes, and experience with Windows, Active Directory, and Linux environments
- Working knowledge of detection engineering, such as EDR and SIEM, so your testing improves defenses and helps the organization prioritize the top risks for remediation quickly
- Proven ability to influence large engineering organizations without authority
- Communication that turns technical findings into business decisions, for audiences up to C-level executives
- Builder first. You'd rather prototype a tool than describe one, and you write code you'd hand to another engineer
- Enabler, not gatekeeper. Your default answer is "here's how to do it safely. "
- AI-forward. You use AI to multiply your own work, and you know where it breaks
- Adversarial and disciplined. You think like an attacker and operate inside clear rules of engagement
- Program owner. You set direction in ambiguity and own outcomes without waiting for a mandate
- Executive presence. You engage senior executives directly and treat stakeholders as customers you're accountable to
- Partner to defenders. You measure success by how much better detection and response gets, not by how many findings you log
- Offensive security certifications such as OSCP, OSEP, or CRTO, or equivalent work you can show us
- Published research, CVEs & exploits discovered portfolio, conference talks, or open-source security tools
- Experience with high-traffic consumer, payment, or regulated platforms
Benefits
- Remote (US)
Company Overview
Company H1B Sponsorship