Offensive Security Engineer

We connect top talent in Business Services, Tech, Marketing & Creative with companies of all sizes—offering flexible, high-touch staffing solutions. We are currently filling the following direct-hire job for our client.

Join a pioneering team dedicated to safeguarding complex digital ecosystems by proactively identifying and mitigating security vulnerabilities across applications, cloud infrastructure, APIs, and AI-enabled systems. As an Offensive Security Engineer, you will be at the forefront of offensive cybersecurity, leveraging your expertise to uncover weaknesses before malicious actors do. This critical role combines offensive testing, cloud security, and AI risk assessment to strengthen organizational defenses and enable secure innovation.

• Hands-on experience in penetration testing, offensive security, or red team operations
• Strong proficiency testing web applications, APIs, and cloud environments (preferably AWS)
• Demonstrated knowledge of AI/ML security risks and attack patterns including LLM abuse and model-level threats
• Proficiency with penetration testing tools such as Burp Suite, Metasploit, Nmap, and cloud-native tooling
• Deep understanding of OWASP Top 10, OWASP API Security Top 10, Cloud attack vectors, and MITRE ATT&CK frameworks
• Ability to develop clear, developer-friendly remediation guidance
• Scripting or automation skills using Python, Bash, Power Shell
• Excellent communication skills, capable of working cross-functionally in fast-paced environments

• Testing AI APIs, LLM platforms, or ML pipelines in production
• Familiarity with AI risk frameworks like NIST AI RMF
• Relevant certifications such as OSCP, OSCE, CRTO, GPEN, GXPN, or cloud/security-specific credentials
• Experience working in regulated or high-trust environments
• Knowledge of secure design reviews, threat modeling, and compliance standards (SOC 2, PCI, NIST, ISO)

• Bachelor’s degree in Computer Science, Cybersecurity, or related field
• 3+ years of relevant experience in offensive security, penetration testing, or red teaming

Mission Staff is an equal opportunity employer. Please note that we do not accept unsolicited resumes from third-party recruiters or agencies. Additionally, candidates must be U.S. citizens or Permanent Residents to be considered for this position.