Remote Staff Offensive Security Engineer

Twilio; Philippines; Remote; PHP 9,242,143 - 14,171,286; Full time

Benefits offered by this job

Healthcare

401(k) retirement plan

Paid sick time

Paid personal time off

Parental leave

Equity plan

Job summary

Twilio is seeking a Staff Offensive Security Engineer to spearhead complex attack simulations and design exploit chains from home. You will balance manual testing with automation across web, API, and mobile targets while researching new bypasses and evolving defenses.

The role requires deep experience in offensive security, strong scripting (Python/Bash/C++), and a track record of high/critical vulnerability discovery. Remote role with competitive benefits and equity opportunities.

Qualifications

• 7-10 years in offensive security or pentesting with track record of finding high/critical vulnerabilities in complex environments.
• Expert knowledge of MITRE ATT&CK and OWASP Top 10 for web apps and LLMs.
• Ability to write Python/Bash scripts to automate tests and experience with Python/C++ for exploit development.
• Advanced industry certifications (OSCP/OSEP/OSWE/GXPN) are highly desirable.

Responsibilities

• Perform manual and automated full-stack penetration testing of web apps, APIs, and mobile apps.
• Conduct network and cloud assessments at multiple layers.
• Validate findings from scanners and bug bounty reports to reduce false positives.
• Lead AI/LLM security testing including prompt injection and jailbreak checks.
• Draft detailed, reproducible remediation guidance for engineering teams.
• Maintain and update testing infrastructure (Burp Suite, C2 listeners).
• Support adversary emulation by designing multi-week red team operations.
• Develop custom payloads and obfuscated scripts to test EDR/AV and detection capabilities.
• Build automated AI testing frameworks to assess model-related data leakage risks.
• Assess cloud platforms (AWS/Azure/K8s) focusing on IAM misconfigurations and container escapes.
• Collaborate with SIRT and Detection Engineering to optimize SIEM alerts.
• Oversee bug bounty program trends and suggest architectural security changes.

Skills

Offensive security

Penetration testing

Python

Bash scripting

C++

MITRE ATT&CK

OWASP Top 10 for Web

Adversarial ML

Communication

Education

OSCP

OSEP

OSWE

GXPN

Tools

Burp Suite

Nmap

Metasploit

Wireshark

Cobalt Strike

Job description

Twilio is seeking a Staff Offensive Security Engineer to spearhead complex attack simulations and design exploit chains from home. You will balance manual testing with automation across web, API, and mobile targets while researching new bypasses and evolving defenses.

The role requires deep experience in offensive security, strong scripting (Python/Bash/C++), and a track record of high/critical vulnerability discovery. Remote role with competitive benefits and equity opportunities.