Infrastructure Security Engineer: Offensive & Vulnerability Lead

Cast & Crew; United States; On-site; USD 150,000 - 170,000; Full time

Benefits offered by this job

Medical

Dental

Vision

PTO

Employee discounts

Job summary

Cast & Crew is seeking an Infrastructure Security Engineer to run the operational core of offensive security and vulnerability management programs. You will own the tooling that tests our environment, triage findings, and drive verified closures with engineers and infrastructure teams.

The role involves evaluating emerging security products, including AI‑driven tooling, deploying them into production, and ensuring they deliver concrete improvements.

Qualifications

• Experience running and improving bug bounty programs end‑to‑end.
• Proficiency in managing enterprise vulnerability scanners and CSPM.
• Strong understanding of cloud security and remediation workflows.
• Hands‑on red‑team/penetration testing tooling and methodologies.
• Ability to automate triage, reporting, and integration across platforms.
• Scripting skills to automate data enrichment and evidence collection.
• Experience securing AWS, Azure, or GCP environments.

Responsibilities

• Oversee day‑to‑day operation of the bug bounty program and researcher communications.
• Triage submissions, reproduce findings, deduplicate, and assign severity.
• Defend bounty decisions with platform providers and security leadership.
• Route confirmed findings to engineering/infra owners and verify fixes.
• Drive systemic fixes through pattern analysis and secure‑development feedback.
• Manage vulnerability scans across cloud, on‑prem, and hybrid assets.

Skills

Bug bounty program management

Vulnerability scanning

CSPM

Agentic red team

Security tooling evaluation

Python scripting

Cloud security

Tools

Burp Suite

Postman

Job description

Cast & Crew is seeking an Infrastructure Security Engineer to run the operational core of offensive security and vulnerability management programs. You will own the tooling that tests our environment, triage findings, and drive verified closures with engineers and infrastructure teams.

The role involves evaluating emerging security products, including AI‑driven tooling, deploying them into production, and ensuring they deliver concrete improvements.