Senior Offensive Security Engineer

PAY: $90-100/hour W2

Hybrid role in Mountain View, CA must be onsite 3-4 days a week.

W2 Candidates only. C2C/1099 not possible.

• Seeking a Senior Offensive Security Engineer to proactively identify, exploit, and help eliminate security weaknesses across web platforms and AI/ML systems.
• Must be able to think like an attacker, operate with engineering rigor, and work closely with product, platform, and AI teams to raise the security bar across the organization.
• Role will lead complex penetration tests, design client attack techniques for web and modern AI-powered applications, and influence secure‑by‑design architecture at scale.

• Conduct offensive security assessments on large‑scale web applications, REST APIs, and cloud‑backed services.
• Identify and validate vulnerabilities including injection flaws, access control issues, authentication/authorization weaknesses, SSRF, deserialization, and logic bugs.
• Evaluate LLM‑based systems and AI agents for prompt injection, data exfiltration, model abuse and jailbreaks.
• Design and execute red team–style engagements simulating real‑world adversaries.
• Develop custom exploitation tools, PoCs, and fuzzers for web and AI attack surfaces.
• Identify systemic security weaknesses and collaborate with engineering teams to drive long‑term mitigations.
• Review architectures and designs for new products with an attacker mindset.
• Produce clear, actionable security reports and present findings to technical and executive stakeholders.

• Master’s degree in Computer Science, Computer Engineering, Information Security, or a closely related technical field.
• Doctorate (PhD) in a relevant field is a plus but not required.
• 5+ years of experience in offensive security, penetration testing, or red teaming.
• Deep expertise in web application security.
• Strong understanding of API security.
• Hands‑on experience testing AI/ML or LLM‑based systems, or strong motivation with demonstrated research in this area.
• Proficiency in at least one scripting or programming language (Python, Go, JavaScript, or similar).
• Strong knowledge of common exploitation techniques and attacker tooling.

• Prior work on adversarial ML, red‑teaming AI systems, or secure LLM pipeline design.
• Experience with cloud security (AWS, GCP, Azure) and containerized environments.
• Background in security research, published CVEs, CTF experience, blog posts, or conference talks.
• OSCP, OSEP, OSWE, CRTO, or similar.