Autonomous Offensive Security Engineer

Pensar; New York (NY); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Direct ownership of core autonomous OS

Open source project involvement

Job summary

Pensar is seeking an Offensive Security Agent Engineer to build autonomous offensive security systems spanning web security, AI agents, and security tooling. You will design agent harnesses, execution environments, and workflows to discover and exploit vulnerabilities in real-world apps.

The role emphasizes web-centric offensive security, browser and API automation, multi-step attacks, and reliable production systems. Collaboration with researchers and engineers is key.

Qualifications

• 4+ years of professional software engineering, security engineering, offensive security engineering, or equivalent experience
• Deep understanding of modern web applications, HTTP, browsers, APIs, authentication, sessions, and application architecture
• Experience with agentic systems, LLM applications, autonomous agents, or complex tool-using AI systems
• Experience with browser automation technologies such as Playwright, Puppeteer, Chrome DevTools Protocol, or similar tooling

Responsibilities

• Design and build the agent harness powering autonomous offensive security workflows across Apex and the Pensar platform
• Build systems that allow agents to reliably interact with browsers, terminals, HTTP proxies, scanners, APIs, filesystems, and other security tooling
• Develop orchestration for long-running, multi-step offensive security tasks involving reconnaissance, exploitation, validation, and reporting
• Build abstractions that allow agents to safely and effectively execute tools, inspect results, maintain state, and adapt their approach
• Improve agent context management, memory, task decomposition, planning, and execution across complex engagements
• Design reliable execution environments for autonomous security agents operating against customer applications and infrastructure
• Debug agent trajectories to understand why an agent succeeded, failed, hallucinated, became stuck, or missed an attack path
• Build observability and debugging infrastructure for understanding agent behavior at scale
• Translate manual offensive security techniques into primitives and workflows that autonomous agents can execute reliably
• Track emerging web exploitation techniques and determine how they can be incorporated into Apex

Skills

Software engineering

Python

Go

JavaScript/TypeScript

Rust

C/C++

Agentic systems

Browser automation

Linux

Cloud infrastructure

Education

Bachelor's degree in CS/Cybersecurity or related field or equivalent

Tools

Playwright

Puppeteer

Chrome DevTools Protocol

Job description

Pensar is seeking an Offensive Security Agent Engineer to build autonomous offensive security systems spanning web security, AI agents, and security tooling. You will design agent harnesses, execution environments, and workflows to discover and exploit vulnerabilities in real-world apps.

The role emphasizes web-centric offensive security, browser and API automation, multi-step attacks, and reliable production systems. Collaboration with researchers and engineers is key.