Red Team Engineer/ Offensive Security Lead [Remote]

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Red Team Engineer / Offensive Security Lead based in the United States.

This role offers the opportunity to shape the future of offensive security by building and operating an AI-powered red teaming capability from the ground up.
You will design advanced security automation systems that combine human expertise with frontier AI models to proactively uncover vulnerabilities.
The position sits at the intersection of red team operations, application security, AI engineering, and DevSecOps.
You will work closely with security and engineering teams to identify attack paths, validate risks, and accelerate remediation.
Your work will directly strengthen the resilience of a cloud-based platform used by highly security-conscious organizations.
This is a hands-on technical leadership role for an offensive security expert who thrives on solving complex adversarial challenges.

Accountabilities:

The Red Team Engineer / Offensive Security Lead will own the development and execution of advanced offensive security initiatives, combining automation, AI capabilities, and traditional adversarial techniques to improve security maturity across the organization. The role requires strong technical ownership, collaboration, and the ability to translate security findings into actionable improvements.

• Design, build, and operate an AI-augmented red teaming harness using advanced LLM APIs to support autonomous and semi-autonomous vulnerability discovery.
• Develop control loop architectures that enable AI-driven security workflows based on planning, action, observation, and adjustment.
• Integrate security tooling, vulnerability intelligence sources, software composition analysis, and CI/CD security controls into the red teaming ecosystem.
• Conduct adversarial testing across multiple perspectives, including external attackers, internal users, authenticated users, and privileged environments.
• Identify, chain, validate, and prioritize vulnerabilities using risk-based frameworks such as CVSS, EPSS, and KEV scoring.
• Support and operate internal bug bounty activities, including reviewing findings and coordinating remediation efforts.
• Own security stage gates within CI/CD workflows and ensure security checks are integrated into software delivery processes.
• Collaborate with DevSecOps, SOC, and engineering teams to improve vulnerability detection, response workflows, and security automation.
• Provide technical guidance on SIEM detection use cases and security monitoring improvements.
• Communicate security findings, program health, and recommendations to senior security leadership.

Requirements:

The ideal candidate is an experienced offensive security professional with strong programming skills, a deep understanding of modern application security, and enthusiasm for applying AI technologies to cybersecurity challenges. You should be comfortable operating independently while collaborating with cross-functional teams in a fast-moving environment.

• 5+ years of experience in cybersecurity, penetration testing, red team operations, or related offensive security roles.
• Demonstrated ability to build security tools, automate workflows, write exploits, or create testing frameworks using languages such as Python and/or Go.
• Hands-on experience with LLM APIs, AI agents, tool usage, control loops, and context management in security-related applications.
• Strong understanding of static and dynamic application security testing (SAST/DAST) and the ability to analyze and connect findings.
• Experience working with vulnerability intelligence sources including NVD, EPSS, KEV, OSV.dev, and security advisory databases.
• Experience assessing cloud-hosted SaaS platforms, with cloud security knowledge preferred.
• Familiarity with container security, Docker, Linux environments, and modern infrastructure practices.
• Ability to manage projects independently, define priorities, and deliver against technical milestones.
• Excellent written and verbal communication skills, with the ability to document complex technical findings clearly.
• Must be authorized to work in the United States and meet citizenship requirements.
• Preferred experience with AI agent platforms, offensive security certifications such as OSCP, GXPN, or GPEN, SBOM tooling, CI/CD security tools, infrastructure-as-code security, or bug bounty program operations.

Benefits:

• Competitive annual salary range of $150,000 – $175,000, depending on experience, location, skills, and qualifications.
• Remote-first work environment with flexibility to work from anywhere in the United States.
• Comprehensive medical, dental, and vision insurance coverage.
• Flexible paid time off to support work-life balance.
• 401(k) retirement program.
• Stock option opportunities.
• Opportunity to work on advanced cybersecurity challenges involving AI, cloud platforms, and modern security engineering practices.
• Collaborative environment focused on innovation, ownership, transparency, and continuous learning.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.