AI-Enhanced Red Team Penetration Engineer

Acrisure; Atlanta (GA); On-site; USD 120,000 - 160,000; Full time

Job summary

Acrisure is seeking a hands-on Offensive Security Engineer to perform deep penetration testing across web applications, APIs, and cloud services within a large multi-tenant SaaS portfolio. You will leverage AI-assisted tools to accelerate discovery, build repeatable attack workflows, and collaborate with engineering teams to validate fixes and ship more secure code.

Responsibilities include testing authentication, authorization, and session management, plus cross-tenant data access

Qualifications

• Hands-on offensive security engineer with focus on web apps, APIs, and cloud services.

Responsibilities

• Conduct deep manual penetration tests against web apps, REST/GraphQL APIs, and microservices.
• Test multi-tenant isolation and cross-tenant data access.
• Assess authentication and session architectures (OAuth/OIDC, JWT, MFA).
• Validate authorization models end-to-end from API gateway to data layer.
• Build AI-assisted attack workflows and maintain repeatable tests.
• Penetration tests against AWS/Azure cloud services.
• Produce evidence-based reports with exploits and remediation guidance.

Skills

Penetration testing

Web application security

API security

OAuth/OIDC

JWT handling

MFA bypass

Source-code testing

Cloud security (AWS/Azure)

CI/CD security testing

AI tooling in security

Tools

SAST

Automated testing tooling

Job description

Acrisure is seeking a hands-on Offensive Security Engineer to perform deep penetration testing across web applications, APIs, and cloud services within a large multi-tenant SaaS portfolio. You will leverage AI-assisted tools to accelerate discovery, build repeatable attack workflows, and collaborate with engineering teams to validate fixes and ship more secure code.

Responsibilities include testing authentication, authorization, and session management, plus cross-tenant data access