Offensive Security Engineer

Staff Offensive Security Engineer
- Direct-Hire/FTE
- Remote (US)

Title:

Staff Offensive Security Engineer

Location:

Remote (US)
Compensation:$250-280K Annual Base Salary
Work Requirements: U.S. Citizen, GC Holders, or Authorized to Work in the U.S.

The Team

Our Team runs a Security Engineering program across multiple teams and disciplines. Our Security Engineering team consults on, designs, and builds secure infrastructure and central services that protect our systems, platforms, services, data, and fans. We're builders at heart: we prove ideas by shipping them.

The Job

You'll expand the Red Team Program with AI tooling that lets the rest of engineering test like an attacker. Millions of people hit our platform, and attackers target it for the same reason. You'll show us where our defenses fail before someone else does, make that testing repeatable, and show us in code how to fix what you find. This is a staff-level role: you lead by example from threat analysis to hands-on code, lead through influence rather than authority, and are as comfortable writing an exploit as presenting its business impact to SVP- and C-level executives.

The

ideal candidate will be:

• An operator who has run real offensive engagements
• A leader who understands the practical dynamics of a red team program
• A software engineer who builds AI-driven tools other engineers trust.

This isn't a role for running scanners and writing reports. Security here enables teams rather than blocking them: every finding arrives with a workable fix, and recurring weaknesses become secure defaults. You'll write production software, contribute to a developing agent harness that other engineers use to run AI-assisted security testing safely, and treat it like any product you'd ship. You'll work with a broader team of software security engineers to build scalable adversarial testing capabilities while also helping to drive strategic approaches to defect removal.

What

success looks like

In six months, product and security leaders use your risk briefings to set priorities, and they bring you in early because they trust your judgment. Engineers outside the security team run your testing workflows without asking you for help, and the harness under them keeps every action scoped, logged, and reviewable.

What you'll doRun offensive operations

• Plan and lead red team engagements and adversary emulation modeled on real threat actors and current tradecraft.
• Show how weaknesses chain across teams and systems into business impact.
• Turn findings into risk-ranked remediation, with a fix or pull request the owning team can adopt as-is or build on.
• Contribute as an SME on security analysis during severe incidents and design the durable control changes that follow.

Expand the red team program

• Evolve the program's strategy, rules of engagement, and cadence with system owners, defenders, and incident responders.
• Define how we measure exposure across teams, and give leaders the evidence to fund, fix, or accept risk.
• Turn recurring weaknesses into secure defaults and paved roads.
• Build reusable attack tooling and infrastructure so the program outlasts any single engagement.
• Mentor engineers and grow offensive skills across security and engineering.

Build AI-driven patterns for other engineers

• Design and ship an agent harness for offensive security work, with the safety controls, evaluation, and audit trail other engineers need to trust it.
• Turn common offensive tasks into agent workflows other engineers can run and extend.
• Red team AI systems, including agents and the tools they call.
• Set AI security standards and make build-or-buy recommendations on AI security tooling.
• Hold AI-generated output to the same review bar as human work.

What you need to know

• 12+ years in security, with significant hands-on offensive experience: red teaming, penetration testing, adversary emulation, vulnerability research.
• Strong software engineering in Python, Go, or Rust, with tools in production that other people depend on.
• Hands-on experience building with LLMs and agents, including the controls that keep an agent within its authorized scope.
• Deep expertise attacking cloud infrastructure and identity, such as AWS and Kubernetes, and experience with Windows, Active Directory, and Linux environments.
• Working knowledge of detection engineering, such as EDR and SIEM, so your testing improves defenses and helps the organization prioritize the top risks for remediation quickly.
• Proven ability to influence large engineering organizations without…