Security Engineer, Offensive Security

About This Role

This role focuses on safeguarding AI systems and maintaining user trust by conducting offensive security operations. It involves simulating advanced threat actors, penetration testing high-value deployments, and contributing to AI-assisted security testing tools. The position requires collaboration with other security and engineering teams, particularly on AI-specific attack scenarios, and presenting findings to technical and executive audiences.

Responsibilities

• Conduct red and purple team engagements simulating advanced threat actors across cloud infrastructure, endpoints, and bare metal deployments
• Penetration test specific, high-value deployments
• Contribute to AI-assisted security testing tooling and workflows
• Work cross-functionally with other security and engineering teams, particularly on AI-specific attack scenarios
• Document and present findings to technical and executive audiences, translating attack narratives into actionable risk insights that inform security roadmaps

Requirements

• 5+ years of hands-on experience in red teaming and offensive security operations
• Deep expertise in at least two of: macOS security, Linux Security, Cloud security (GCP/AWS/Azure), Kubernetes, CI/CD pipelines
• Track record of discovering novel attack vectors and chaining vulnerabilities creatively
• Experience conducting adversarial simulations against well-defended environments
• Strong engineering skills (Python, Go, or similar)
• Ability to write clear findings that drive action, helping teams understand risk and prioritize fixes
• Collaborative approach, working in close collaboration with the blue team
• Bachelor’s degree or an equivalent combination of education, training, and/or experience
• Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience

Nice to have:

• Prior work at organizations with state actor threat models
• Interest in AI safety and how security engineering contributes to responsible AI developments
• Background testing AI/ML systems or agentic workflows
• Familiarity with detection engineering and SIEM/EDR platforms from the defensive side
• Experience with data center security or hardware-based attacks

Benefits

• Optional equity donation matching
• Generous vacation and parental leave
• Flexible working hours
• Lovely office space in which to collaborate with colleagues

Important Details

• Schedule: hybrid policy, at least 25% of the time in one of our offices (some roles may require more)