Member of Technical Staff (Offensive Security Engineer)

Perplexity; General Trias; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Perplexity is seeking an experienced Offensive Security Engineer to join our security team. You will lead red team operations, perform intense penetration testing, and simulate adversaries across our cloud, web, and AI systems, driving remediation with engineering partners.

You will conduct purple team exercises, threat modeling, and continuous testing of CI/CD pipelines and supply chain controls, ensuring robust security across platforms.

Qualifications

• 5+ years of hands-on experience in offensive security, red teaming, or penetration testing.
• Experience with cloud infrastructures and modern application security practices.

Responsibilities

• Plan and execute red team and purple team engagements simulating advanced threat actors across cloud infrastructure (AWS, Kubernetes), endpoints, and application surfaces
• Conduct continuous penetration testing of web applications, APIs, mobile clients, browser extensions, cloud infrastructure, and internal services
• Assess AI/ML-specific attack surfaces including prompt injection and model exfiltration
• Develop and maintain custom offensive tooling, exploits, and automation
• Perform open-scope adversary simulations to test detection and response capabilities end to end
• Drive threat modeling sessions with engineering teams to identify attack vectors in new features and architectures
• Deliver clear, actionable findings to technical and executive audiences; validate remediations with engineering
• Contribute to security of CI/CD pipelines, supply chain integrity, and secrets management through offensive assessment
• Stay current on emerging attack techniques and adversary tradecraft; bring external perspective to security strategy

Skills

Red teaming

Penetration testing

Cloud security

Job description

Perplexity is seeking a highly skilled, experienced and hands-on Offensive Security Engineer to join our dynamic security team, taking an adversarial approach to hardening Perplexity's infrastructure, applications, and AI systems. You'll plan and execute red team operations, penetration tests, and attack simulations across our cloud infrastructure, web and mobile applications, AI/ML pipeline, and corporate environment—finding real vulnerabilities before adversaries do and working directly with engineering teams to drive remediation.

Responsibilities

• Plan and execute red team and purple team engagements simulating advanced threat actors across cloud infrastructure (AWS, Kubernetes), endpoints, and application surfaces
• Conduct continuous penetration testing of web applications, APIs, mobile clients, browser extensions, cloud infrastructure, and internal services
• Assess AI/ML-specific attack surfaces including prompt injection, model exfiltration, agent abuse, tool-use exploitation, and MCP security boundaries
• Develop and maintain custom offensive tooling, exploits, and automation to improve the efficiency and coverage of security testing
• Perform open-scope adversary simulations that test detection and response capabilities end to end, collaborating closely with the defensive security team
• Drive threat modeling sessions with engineering teams to identify and prioritize attack vectors in new features and architectures
• Deliver clear, actionable findings to both technical and executive audiences; partner with engineering to validate remediations
• Contribute to the security of CI/CD pipelines, supply chain integrity, and secrets management through offensive assessment
• Stay current on emerging attack techniques, vulnerability research, and adversary tradecraft; bring external perspective into Perplexity's security strategy.

Qualifications

• 5+ years of hands-on experience in offensive security, red teaming, or penetration testing
• Deep technical expertise in at least two of: clo