HireTalent - Staffing & Recruiting Firm · 2 days ago
Senior Offensive Security Engineer-Web&AI
Confidential company is seeking a Senior Offensive Security Engineer to proactively identify and eliminate security weaknesses across web platforms and AI/ML systems. The role involves leading penetration tests, designing attack techniques, and collaborating with various teams to enhance security measures.
DeliveryHuman ResourcesStaffing Agency
Responsibilities
Conduct offensive security assessments on large-scale web applications, REST APIs, and cloud-backed services
Identify and validate vulnerabilities including injection flaws, access control issues, authentication/authorization weaknesses, SSRF, deserialization, and logic bugs
Evaluate LLM-based systems and AI agents for prompt injection, data exfiltration, model abuse and jailbreaks
Design and execute red team–style engagements simulating real-world adversaries
Develop custom exploitation tools, PoCs, and fuzzers for web and AI attack surfaces
Identify systemic security weaknesses and collaborate with engineering teams to drive long-term mitigations
Review architectures and designs for new products with an attacker mindset
Produce clear, actionable security reports and present findings to technical and executive stakeholders
Qualification
Required
Master's degree in Computer Science, Computer Engineering, Information Security, or a closely related technical field
5+ years of experience in offensive security, penetration testing, or red teaming
Deep expertise in web application security
Strong understanding of API security
Hands-on experience testing AI/ML or LLM-based systems, or strong motivation with demonstrated research in this area
Proficiency in at least one scripting or programming language (Python, Go, JavaScript, or similar)
Strong knowledge of common exploitation techniques and attacker tooling
Preferred
Prior work on adversarial ML, red-teaming AI systems, or secure LLM pipeline design
Experience with cloud security (AWS, GCP, Azure) and containerized environments
Background in security research, published CVEs, CTF experience, blog posts, or conference talks
OSCP, OSEP, OSWE, CRTO, or similar
Company
HireTalent - Staffing & Recruiting Firm
HireTalent is a certified Minority Business Enterprise (MBE) workforce solutions firm, specializing in securing the best talent fits in Executive/Retained Search, Direct Hire Placements, MSP, SOW, and nationwide hiring program management and support.