Senior Offensive Security Research Engineer.

Position Overview

We are seeking a Senior Offensive Security Research Engineer with deep expertise in offensive security, penetration testing, AI/LLM security, agentic AI systems, and Python development. The ideal candidate will operate at the intersection of cybersecurity research and modern AI technologies, identifying, validating, and documenting vulnerabilities across web applications, APIs, cloud environments, infrastructure, and AI-powered systems.

Key Focus Areas (client's notes)

1. 3+ years in application/infrastructure penetration testing
2. Strong Python scripting/automation skills
3. Experience with Burp Suite, Nmap, Metasploit, nuclei, ffuf, httpx, sqlmap, etc.
4. Ability to document findings clearly with reproducible proof
5. Good understanding of OWASP Top 10, API security, auth flaws, misconfigurations, and network weaknesses
6. Red team/adversary emulation exposure
7. Bug bounty, CVEs, CTFs, or published research
8. Docker/Linux/Kali tooling experience

Key Responsibilities

• Conduct advanced offensive security assessments across web, API, cloud, and infrastructure environments.
• Perform manual penetration testing and adversary emulation exercises.
• Research, identify, validate, and document security vulnerabilities.
• Develop Python-based tools and automation for security testing.
• Perform LLM and Agentic AI security assessments, including prompt injection, jailbreak, privilege escalation, tool abuse, and data leakage testing.
• Execute red team activities against traditional and AI-enabled systems.
• Create reproducible proof-of-concepts and clear technical reports.
• Collaborate with engineering teams to validate remediation efforts.
• Contribute to security research, vulnerability disclosure, and innovation initiatives.

Required Qualifications

• 5+ years of offensive security experience.
• 3+ years of application and infrastructure penetration testing.
• Strong Python scripting and automation expertise.
• Hands-on experience with:
  • Burp Suite
  • Nmap
  • Metasploit
  • Nuclei
  • FFUF
  • HTTPX
  • SQLMap
  • Docker
  • Linux/Kali
• Strong understanding of:
  • OWASP Top 10
  • API Security
  • Authentication & Authorization
  • Network Security
  • Cloud Security
• Experience with red team operations and adversary simulation.

Preferred Qualifications

• Experience securing or testing LLM-based applications.
• Agentic AI development experience.
• AI Red Teaming experience.
• Bug bounty achievements.
• CVEs or security research publications.
• OSCP, OSWE, OSEP, CRTO, GPEN or similar certifications.
• Experience with AWS, Azure, or GCP security testing.

Nice to Have

• Published security research.
• Open-source security tool contributions.
• Conference presentations or vulnerability disclosures.