Sr. Architect | Offensive Security​/AI Testing​/Cloud Testing; Remote

Who is Trace3
?

Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.

Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!

Trace3 is headquartered in Irvine, California. We employ more than 1,200 people all over the United States. Our major field office locations include Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Francisco.

Ready to discover the possibilities that live in technology?

Come Join Us!

Street-Smart-Thriving in Dynamic Times

We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.

Juice
-The “Stuff” it takes to be a Needle Mover

We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping outevery checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.

Teamwork
-Humble, Hungry and Smart

The Senior Architect, Offensive Security is a senior technical contributor who leads advanced offensive security engagements for Trace3 clients, with a primary focus on cloud security testing (particularly Microsoft Azure, Entra , and Microsoft 365) and AI/LLM security testing. This role uncovers vulnerabilities and realistic attack paths in modern cloud and AI-enabled environments through adversary-minded, manual testing that goes well beyond automated scanning, and delivers clear, actionable remediation guidance.

The Sr. Architect will plan, execute, and report on complex assessments, serve as a technical escalation point for the team, and help build the testing methodologies behind the practice’s cloud and AI service offerings. Mobile application testing experience is a plus. While general internal network, external network and web application penetration testing experience is valued and may be utilized, this role is focused on specialized testing.

A key function of this role will be building deep relationships, gaining trust, and enabling client success.

• Lead and execute cloud security assessments and penetration tests, primarily in Microsoft Azure, Entra , and Microsoft 365 (and AWS or GCP as applicable), covering identity and privilege escalation, tenant and subscription attack paths, managed identities, Key Vault, storage, serverless, and container (AKS) workloads
• Identify and exploit cloud identity weaknesses, including conditional access gaps, OAuth application and consent abuse, token theft and replay, and hybrid identity attack paths between on-premises Active Directory and Entra
• Assess cloud Dev Ops and infrastructure-as-code environments (e.g., Azure Dev Ops, Git Hub Actions, Terraform) for pipeline compromise, secrets exposure, and privilege escalation paths
• Perform security assessments of AI/ML and LLM-enabled applications and agentic systems, including prompt injection, jail breaking, sensitive data leakage, insecure output handling, excessive agency, RAG pipeline weaknesses, and model supply-chain risk, aligned to the OWASP Top 10 for LLM Applications and MITRE ATLAS
• Assess the cloud platforms…