Offensive Security Engineer

About the role

Join a hands‑on offensive security team at the frontier of cloud infrastructure and AI. You will simulate sophisticated attacks on cloud compute, storage, networking, inference, orchestration and internal tooling to uncover weaknesses before they become real threats.

Key responsibilities

• Validate and extend Secure SDLC threat models through continuous penetration testing and threat assessment.
• Plan and execute full‑scope red‑team engagements across cloud, GPU, AI and orchestration layers.
• Research novel attacks against GPU infrastructure, firmware, drivers and AI model‑serving pipelines.
• Collaborate with detection and security engineering teams on purple‑team exercises.
• Develop custom offensive tooling and post‑exploitation capabilities using Python or Go.
• Produce clear, actionable reports for technical teams and senior leadership.

Required profile

• 6+ years of experience in offensive security, penetration testing or red teaming.
• Deep hands‑on experience attacking cloud‑native environments (Kubernetes, IAM abuse, container escape).
• Strong understanding of the full attack lifecycle and ability to communicate findings to senior stakeholders.
• Experience with ML infrastructure, GPU clusters or AI platforms is a strong advantage.

Required skills

• Python
• Go
• Kubernetes privilege escalation
• Cloud IAM abuse
• Virtualization and container escape techniques
• eBPF bypass techniques
• Kernel‑level exploitation
• Reverse engineering and exploit development

What we offer

• Competitive compensation with equity upside
• Flexible, remote‑first working environment
• Opportunities for career growth and continuous learning
• Significant ownership and flexibility in tackling security challenges