Autonomous Offensive Security Engineer

Parameter; San Francisco (CA); On-site; USD 180,000 - 250,000; Full time

Job summary

Parameter builds AI agents that perform offensive security work, running autonomous penetration tests against production applications and cloud environments to find IDORs, broken access control, XSS, and misconfigurations. You are the person whose expertise gets encoded into the product.

You'll run tests, translate methodology into agent capabilities, and lead technical engagements with customers. This is hands-on, fast-moving work on a small team.

Qualifications

• 3+ years of hands-on offensive security experience.
• Deep knowledge of web vulnerability classes, especially access control and business logic.
• Cloud security experience across AWS or GCP: IAM, misconfigurations, privilege escalation paths.
• Ability to write code and build your own tooling beyond running others' tools.

Responsibilities

• Run manual penetration tests against customer web applications, APIs, and cloud infrastructure.
• Translate your methodology into agent capabilities: new attack modules, detection logic, and verification steps.
• Validate and triage agent findings before they reach customers. You are the quality bar.
• Lead the technical side of customer engagements, including scoping calls and findings walkthroughs.
• Contribute to our vulnerability research and responsible disclosure work.

Skills

Offensive security

Coding skills

Communication skills

Tools

TypeScript

Job description

Parameter builds AI agents that perform offensive security work, running autonomous penetration tests against production applications and cloud environments to find IDORs, broken access control, XSS, and misconfigurations. You are the person whose expertise gets encoded into the product.

You'll run tests, translate methodology into agent capabilities, and lead technical engagements with customers. This is hands-on, fast-moving work on a small team.