Offensive Security Engineer

Mosaic.tech; United States; On-site; USD 140,000 - 200,000; Full time

Job summary

Wraithwatch is seeking an experienced Offensive Security Engineer to harden the platform and evolve its AI red-teaming capabilities. You will apply advanced penetration testing techniques against commercial and government environments, helping shape security controls across the product.

This role emphasizes learning new attack tradecraft, adapting AI to red teaming, and readiness for extended hours as needed.

Qualifications

• 5+ years professional experience conducting complex penetration testing assessments in commercial or government environments.
• Deep, hands-on understanding of offensive cyber tradecraft (memory-resident threats, fileless techniques, C2, initial access).
• Experience implementing enterprise security controls such as anti-malware policies, IAM, and detection engineering.
• Interest in adapting AI to red teaming / penetration testing use cases.

Responsibilities

• Hardening the Wraithwatch platform against advanced threats and evolving its security posture.
• Teach the system attack tradecraft and guide its evolution to execute it autonomously.
• Collaborate with security teams to implement robust controls and detection capabilities.

Skills

Penetration testing

Offensive security

Security controls

AI red teaming

Job description

Wraithwatch was founded by security engineers from SpaceX, Palantir, and Anduril to build the next generation of AI-powered cyber defense systems for the United States and its allies. We are deployed today to customers spanning Fortune 500, US Federal Government, commercial nuclear, aerospace, defense, maritime, and other emerging technology companies. Our core product is a cyber defense platform utilizing generative artificial intelligence agents to autonomously model a digital twin of an organization's entire IT and cybersecurity environment and analyze it for weaknesses, misconfigurations, and chains of possible attack.

As an offensive security engineer you will not only continuously harden Wraithwatch (the company and product) against advanced threats, you will also teach the system your expert attack tradecraft and have it evolve to execute it on its own.

Note: This is not a research position.

Basic Qualifications

• 5+ years professional experience conducting complex penetration testing assessments in commercial or government environments.

• Deep, hands‑on understanding of the current landscape of offensive cyber tradecraft (in memory, fileless attacks, beacon object files, malleable C2, modern initial access vectors, emerging EDR bypasses, etc).

• Experience implementing or assisting with the implementation of enterprise / corporate security controls such as anti‑malware policies, identity and access controls, detection engineering, device management, or similar.

• Interest in adapting AI to red teaming / penetration testing use cases. This is a hard requirement.

Preferred Qualifications

• Interest in modern machine learning or artificial intelligence capabilities, especially emerging subsets of Generative AI such as agentic behavior, tool calling, knowledge graph integration, retrieval augmented generation, etc.

• Ability to deal with ambiguity and learn new technologies quickly.

Additional Requirements

• Willingness to work extended hours and weekends as needed.