Offensive Security Engineer

What you'll do

• Develop reusable attack scenarios and safely run authorized emulations; validate detections and identify visibility gaps.
• Research attacks and emerging exploits across AI systems, cloud, identity, and data environments; develop detection hypotheses and tests.
• Build continuous validation and contribute detections, hunt logic, telemetry requirements, and regression tests; partner with SOC teams and customers.

What they ask for

• 5+ years of hands-on cybersecurity experience, with substantial offensive security, red teaming, adversary emulation, or security research work; equivalent demonstrated expertise is welcome.
• Strong Python skills and experience building reusable security tools with APIs, SDKs, Git, code review, and automated testing.
• Deep practical expertise in at least one cloud or identity ecosystem, plus practical web/API security knowledge.
• Experience reproducing attacks in controlled environments and connecting behavior to audit logs, detection logic, and investigation evidence.

Nice to have

• Experience with Atomic Red Team, MITRE ATT&CK and ATLAS, purple teaming, or continuous security validation.
• Experience with SQL, detection-as-code, or hands-on work with MCP servers, RAG systems, model gateways, or repeatable AI evaluations.

Pay

$180,000 – $220,000 per year (base salary)

Tools

Python, APIs, SDKs, Git, Atomic Red Team, MITRE ATT&CK, ATLAS, SQL

AI focus

Research attacks against AI systems and agent workflows, build AI evaluation harnesses, and use AI to accelerate security research and tooling while verifying outputs.