Offensive Security Engineer

Wraithwatch Corporation; United States; On-site; USD 110,000 - 150,000; Full time

Job summary

A cybersecurity firm is seeking an offensive security engineer to enhance their AI-powered cyber defense systems. The role involves penetration testing, teaching the system attack tradecraft, and working closely with product engineers. Candidates should have over 5 years of experience in penetration testing and an interest in AI for red teaming. This hands-on position is crucial for protecting digital environments across various sectors, including government and Fortune 500 firms.

Qualifications

• 5+ years professional experience in penetration testing in commercial or government settings.
• Deep understanding of current offensive cyber tradecraft.
• Experience with enterprise security controls.

Responsibilities

• Continuously harden the company's systems against advanced threats.
• Teach the system attack tradecraft for autonomous evolution.
• Build and ship products with core engineering teams.

Skills

Penetration testing

Offensive cyber tradecraft

Security controls implementation

AI adaptation for red teaming

Job description

Wraithwatch was founded by security engineers from SpaceX, Palantir, and Anduril to build the next generation of AI‑powered cyber defense systems for the United States and its allies. We are deployed today to customers spanning Fortune 500, US Federal Government, commercial nuclear, aerospace, defense, maritime, and other emerging technology companies. Our core product is a cyber defense platform utilizing generative artificial intelligence agents to autonomously model a digital twin of an organization's entire IT and cybersecurity environment and analyze it for weaknesses, misconfigurations, and chains of possible attack.

As an offensive security engineer you will not only continuously harden Wraithwatch (the company and product) against advanced threats, you will also teach the system your expert attack tradecraft and have it evolve to execute it on its own.

Note: This is not a research position.

You will be building and shipping things on the daily with the core product engineers.

Basic Qualifications

• 5+ years professional experience conducting complex penetration testing assessments in commercial or government environments.
• Deep, hands‑on understanding of the current landscape of offensive cyber tradecraft (in‑memory attacks, fileless attacks, beacon object files, malleable C2, modern initial access vectors, emerging EDR bypasses, etc.).
• Experience implementing or assisting with the implementation of enterprise/corporate security controls such as anti‑malware policies, identity and access controls, detection engineering, device management, or similar.
• Interest in adapting AI to red teaming / penetration testing use cases. This is a hard requirement.

Preferred Qualifications

• Interest in modern machine learning or artificial intelligence capabilities, especially emerging subsets of Generative AI such as agentic behavior, tool calling, knowledge graph integration, retrieval‑augmented generation, etc.
• Ability to deal with ambiguity and learn new technologies quickly.

Additional Requirements

• Willingness to work extended hours and weekends as needed.