Offensive Security Engineer

Jobgether SRL; France; Remote; EUR 90,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation with equity

Remote-first environment

Career growth

Ownership of security challenges

Work on GPU/AI security surfaces

Collaboration with experienced infra/A

Job summary

Jobgether SRL is seeking an experienced Offensive Security Engineer based in France to join a hands-on team working at the frontier of cloud infrastructure and AI. You will simulate sophisticated attacks across cloud compute, storage, networking, inference, orchestration, and internal tooling to uncover weaknesses before they become threats.

You will own and advance red-team processes, develop custom tooling, and deliver actionable reports to engineers and senior leadership, while collaborating

Qualifications

• 6+ years of experience in offensive security, penetration testing, red teaming, adversary simulation, or a closely related discipline.
• Deep hands-on experience attacking cloud-native environments, including Kubernetes privilege escalation, cloud IAM abuse, virtualization, and container escape techniques.
• Strong understanding of the broader attack lifecycle, including initial access, persistence, lateral movement, and data exfiltration.
• Proven ability to develop custom security tooling and post-exploitation capabilities using Python, Go, or similar programming languages.
• Experience conducting purple team exercises and collaborating constructively with blue teams and defensive security functions.
• Ability to communicate complex technical findings through clear, senior-level reports that contextualize business risk and provide actionable guidance to engineers.
• Experience with ML infrastructure, model-serving pipelines, or GPU clusters is a strong advantage.
• Reverse engineering and exploit development experience is a plus.
• Application security experience is advantageous.
• Familiarity with eBPF bypass techniques, kernel-level exploitation, vulnerability research, or CVE discovery is beneficial.
• Understanding of cloud provider internals, including hypervisor and networking layers, is a plus.
• Experience presenting security research at industry conferences such as Black Hat or DEF CON is advantageous.
• Strong problem-solving skills, curiosity, technical depth, and the ability to work independently in a rapidly evolving environment.

Responsibilities

• Validate and extend Secure SDLC threat models through continuous penetration testing, assessing threat severity, mitigation status, and underlying security assumptions.
• Automate routine security validations to keep pace with a rapidly evolving platform while reserving manual analysis for complex and high-impact scenarios.
• Plan and execute full-scope red team engagements across cloud compute, storage, inference, networking, orchestration layers, and internal tooling.
• Identify attack paths capable of impacting organizational operations, customer environments, or critical platform assets.
• Collaborate with detection and response and other security engineering teams on purple team exercises, validating detection coverage and closing defensive gaps.
• Research novel attacks against GPU infrastructure, including firmware, vendor drivers, device passthrough, SR-IOV/IOMMU configurations, and RDMA/InfiniBand environments.
• Investigate vulnerabilities within inference technologies and AI platform services, including model-serving infrastructure and managed orchestration platforms.
• Assess tenant-isolation boundaries and explore potential low-level attack paths that could compromise isolation.
• Conduct targeted offensive security assessments of new products and significant infrastructure changes before they reach production.
• Develop custom offensive tooling and post-exploitation capabilities to improve the effectiveness and scalability of security testing.
• Produce clear, actionable reports for both technical teams and senior leadership, prioritizing findings and providing practical remediation guidance.
• Establish and continuously improve red team processes, tooling, methodologies, and operating practices as the platform scales.

Skills

Cloud security

Kubernetes Privilege Escalation

Cloud IAM abuse

Programming: Python

Go

Purple team

Security tooling

Post-exploitation

ML infrastructure

Reverse engineering

Application security

Kernel exploitation

eBPF bypass

Defensive collaboration

Tools

Python

Go

Kubernetes

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Offensive Security Engineer based in France.

Join a hands-on offensive security team working at the frontier of cloud infrastructure and AI. In this role, you’ll simulate sophisticated attacks against the same systems customers rely on, helping uncover weaknesses before they can become real threats. You’ll contribute across cloud compute, storage, networking, inference, orchestration, and internal tooling while helping establish a scalable penetration testing and red team program. The role combines practical adversarial operations with security research into emerging GPU and AI infrastructure attack surfaces. You’ll work closely with detection and security engineering teams to validate defenses and turn findings into measurable improvements. With substantial technical ownership, you’ll have the opportunity to influence security practices across a rapidly evolving, large-scale AI platform.

Accountabilities

• Validate and extend Secure SDLC threat models through continuous penetration testing, assessing threat severity, mitigation status, and underlying security assumptions.
• Automate routine security validations to keep pace with a rapidly evolving platform while reserving manual analysis for complex and high-impact scenarios.
• Plan and execute full-scope red team engagements across cloud compute, storage, inference, networking, orchestration layers, and internal tooling.
• Identify attack paths capable of impacting organizational operations, customer environments, or critical platform assets.
• Collaborate with detection and response and other security engineering teams on purple team exercises, validating detection coverage and closing defensive gaps.
• Research novel attacks against GPU infrastructure, including firmware, vendor drivers, device passthrough, SR-IOV/IOMMU configurations, and RDMA/InfiniBand environments.
• Investigate vulnerabilities within inference technologies and AI platform services, including model-serving infrastructure and managed orchestration platforms.
• Assess tenant-isolation boundaries and explore potential low-level attack paths that could compromise isolation.
• Conduct targeted offensive security assessments of new products and significant infrastructure changes before they reach production.
• Develop custom offensive tooling and post-exploitation capabilities to improve the effectiveness and scalability of security testing.
• Produce clear, actionable reports for both technical teams and senior leadership, prioritizing findings and providing practical remediation guidance.
• Establish and continuously improve red team processes, tooling, methodologies, and operating practices as the platform scales.

Requirements

• 6+ years of experience in offensive security, penetration testing, red teaming, adversary simulation, or a closely related discipline.
• Deep hands-on experience attacking cloud-native environments, including Kubernetes privilege escalation, cloud IAM abuse, virtualization, and container escape techniques.
• Strong understanding of the broader attack lifecycle, including initial access, persistence, lateral movement, and data exfiltration.
• Proven ability to develop custom security tooling and post-exploitation capabilities using Python, Go, or similar programming languages.
• Experience conducting purple team exercises and collaborating constructively with blue teams and defensive security functions.
• Ability to communicate complex technical findings through clear, senior-level reports that contextualize business risk and provide actionable guidance to engineers.
• Experience with ML infrastructure, model-serving pipelines, or GPU clusters is a strong advantage.
• Reverse engineering and exploit development experience is a plus.
• Application security experience is advantageous.
• Familiarity with eBPF bypass techniques, kernel-level exploitation, vulnerability research, or CVE discovery is beneficial.
• Understanding of cloud provider internals, including hypervisor and networking layers, is a plus.
• Experience presenting security research at industry conferences such as Black Hat or DEF CON is advantageous.
• Strong problem-solving skills, curiosity, technical depth, and the ability to work independently in a rapidly evolving environment.

Benefits

• Competitive compensation with equity upside.
• Flexible, remote-first working environment.
• Opportunities for career growth, continuous learning, and professional development.
• Significant ownership and flexibility in how security challenges are approached.
• Opportunity to work on novel attack surfaces spanning GPU infrastructure, AI platforms, and large-scale multi-tenant cloud environments.
• Collaboration with highly experienced engineers working on advanced AI infrastructure.
• Opportunity to contribute directly to impactful AI and cloud security initiatives.
• International environment with talented teams across multiple regions.
• Inclusive and collaborative culture focused on innovation, trust, meaningful impact, and continuous growth.