AI-Driven Offensive Security Engineer

Parameter ai; San Francisco (CA); On-site; USD 180,000 - 250,000; Full time

Job summary

Parameter ai is hiring for a full-time offensive security specialist in San Francisco, CA. You will perform hands-on testing against customer web apps, APIs, and cloud infrastructure, and translate findings into autonomous agent capabilities.

You’ll work across product, agent systems, and client engagements in a fast-moving, small team. The role emphasizes practical exploit development, responsible disclosure, and delivering clear, actionable reports to executives and engineers.

Qualifications

• 3+ years of hands-on offensive security: web application pentesting, red teaming, or serious bug bounty work.
• Deep knowledge of web application vulnerability classes, particularly access control, authentication, and business logic flaws.
• Cloud security experience across AWS or GCP: IAM, misconfiguration, privilege escalation paths.
• You write code and build your own tooling, not just running others’; we are a TypeScript shop, but focus is on creating more than consuming.
• Ability to write clearly for engineers and executives; unclear findings do not get fixed.
• Bonus: OSCP, OSWE, published CVEs, bug bounty leaderboard, or conference talks.

Responsibilities

• Run manual penetration tests against customer web applications, APIs, and cloud infrastructure
• Translate your methodology into agent capabilities: new attack modules, detection logic, and verification steps
• Validate and triage agent findings before they reach customers. You are the quality bar
• Lead the technical side of customer engagements, including scoping calls and findings walkthroughs
• Contribute to our vulnerability research and responsible disclosure work, which is a core part of how we go to market

Skills

Offensive security

Web app security

Cloud security

Coding & tooling

Clear communication

Certifications/bug bounty

Tools

TypeScript

Job description

Parameter ai is hiring for a full-time offensive security specialist in San Francisco, CA. You will perform hands-on testing against customer web apps, APIs, and cloud infrastructure, and translate findings into autonomous agent capabilities.

You’ll work across product, agent systems, and client engagements in a fast-moving, small team. The role emphasizes practical exploit development, responsible disclosure, and delivering clear, actionable reports to executives and engineers.