AI-Driven Red Team Engineer

Royal Abstract of New York LLC; Atlanta (GA); On-site; USD 120,000 - 210,000; Full time

Benefits offered by this job

401(k) plan

Health, Dental, Vision insurance

Paid time off

Job summary

Acrisure is seeking a hands-on offensive security engineer to identify and prove exploitable vulnerabilities across web applications, APIs, and cloud-hosted services in a large SaaS portfolio. You will conduct manual and automated assessments, build attack tooling, and collaborate with engineering teams to validate fixes.

The role emphasizes AI-powered reconnaissance, vulnerability discovery, and reporting, including prompt injection risks in AI-enabled features.

Qualifications

• Hands-on offensive security engineer with web app and API testing focus.
• Experience testing multi-tenant SaaS platforms with sensitive data.
• Ability to work with engineering teams to validate fixes and write reports.

Responsibilities

• Perform deep manual penetration tests on web apps and REST/GraphQL APIs.
• Test multi-tenant SaaS data access, privilege escalation, and isolation.
• Assess authentication, session management, and authorization models.
• Leverage AI tooling to accelerate reconnaissance and reporting.
• Develop repeatable attack workflows and integrate findings into SDLC.

Skills

Web app testing

API testing

Cloud security

OAuth/OIDC

MFA & session management

Automation tooling

AI tooling

Security tooling in CI/CD

Tools

Burp Suite

OWASP ZAP

SAST/DAST tooling

Job description

Acrisure is seeking a hands-on offensive security engineer to identify and prove exploitable vulnerabilities across web applications, APIs, and cloud-hosted services in a large SaaS portfolio. You will conduct manual and automated assessments, build attack tooling, and collaborate with engineering teams to validate fixes.

The role emphasizes AI-powered reconnaissance, vulnerability discovery, and reporting, including prompt injection risks in AI-enabled features.