**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer (Red Team) based in United States.** Join a cutting-edge cybersecurity team focused on proactively identifying vulnerabilities before attackers can exploit them. In this highly technical role, you'll lead offensive security initiatives across cloud environments, SaaS platforms, APIs, and next-generation AI-powered systems. Working closely with security engineering, AI/ML, and product teams, you'll simulate sophisticated real-world attacks to strengthen defenses and improve resilience. This is an opportunity to operate at the forefront of adversarial AI, cloud security, and red teaming while helping shape the security posture of innovative technologies. If you're passionate about offensive security, continuous learning, and solving complex security challenges, this role offers meaningful impact in a collaborative, remote-first environment. ### Accountabilities: - Design and execute advanced red team engagements targeting cloud infrastructure, SaaS applications, APIs, AI systems, large language model (LLM) pipelines, autonomous agents, and retrieval-augmented generation (RAG) architectures. - Conduct offensive security assessments focused on prompt injection, jailbreak techniques, adversarial AI attacks, model extraction, data leakage, inference manipulation, and other emerging AI security threats. - Perform penetration testing across web applications, APIs, cloud platforms, and containerized environments while supporting vulnerability research and bug bounty initiatives. - Simulate deepfake, voice synthesis, and spoofing attacks to evaluate authentication systems and identify opportunities for improving detection capabilities. - Develop custom offensive tooling, automation, and testing frameworks using Python or similar programming languages to improve security operations and assessment efficiency. - Collaborate with engineering, security operations, AI/ML, and product teams to perform threat modeling, architecture reviews, code reviews, and remediation planning. - Translate technical findings into actionable recommendations, improve detection capabilities, and contribute to strengthening defensive security strategies. - Stay current with evolving cybersecurity trends, adversarial machine learning research, cloud security practices, and emerging attack techniques to continuously enhance offensive security capabilities. ## Requirements - 3+ years of hands-on experience in penetration testing, red teaming, or offensive security across cloud platforms, SaaS applications, APIs, and web environments. - Practical experience assessing AI or LLM-based systems, including prompt injection, adversarial testing, jailbreak techniques, or other GenAI attack methodologies. - Experience working with offensive security tools such as Burp Suite, OWASP ZAP, Nmap, Metasploit, Cobalt Strike, or comparable frameworks. - Strong programming or scripting skills, preferably in Python, for automation, custom tooling, and offensive security workflows. - Experience with cloud security concepts, container security, API security, and security standards such as OWASP, NIST, ISO 27001, CIS, PCI DSS, or SOC 2. - Familiarity with SAST/DAST solutions and integrating security testing into CI/CD pipelines. - Excellent analytical, communication, and problem-solving skills, with the ability to explain technical findings to both engineering and leadership audiences. - Preferred qualifications include offensive security certifications (OSCP, GPEN, GWAPT, GXPN, CEH, or equivalent), software development experience, research in adversarial machine learning or AI security, and experience with voice biometrics, fraud prevention, or AI-powered security technologies. ## Benefits - Base salary ranging from **$140,000 to $165,000 USD**, based on experience, skills, and location. - Restricted Stock Units (RSUs) as part of the compensation package. - Remote-first work environment with flexibility and regular in-person team gatherings. - Unlimited Paid Time Off (PTO). - Comprehensive medical, dental, vision, and health benefits, including employer-paid health plan options. - Employer contributions to a Health Savings Account (HSA). - Paid parental leave for birth, adoptive, and foster parents. - One year of diaper delivery support for new parents. - Monthly phone and internet reimbursement. - Enhanced fertility and specialized healthcare benefits. - Annual learning and development stipend for certifications, training, and professional growth. - Collaborative culture featuring wellness initiatives, team events, and opportunities to work alongside experienced cybersecurity professionals. **How Jobgether works:** We use an **AI-powered matching process** to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! [Why Apply Through Jobgether?](https://jobgether.com/how-jobgether-works) **Data Privacy Notice:** By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1