Offensive Security Engineer

CloudWalk, Inc.; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

CloudWalk is seeking a security-focused pentester to break into applications, APIs, and infrastructure, then engineer defenses and automation. You will perform web and mobile pentesting, plan red-team operations, and build tooling that scales the team’s impact.

Proficiency in TypeScript or Go, cloud security, and CI/CD integration is expected, with strong collaboration across engineering teams. The role blends offensive security with defensive engineering in a fast-paced fintech environment,

Qualifications

• Strong knowledge of vulnerabilities, exploitation techniques, and secure coding practices.
• Experience with web app and API pentesting; mobile pentesting is a plus.

Responsibilities

• Penetrate and assess applications across the stack to identify vulnerabilities.
• Conduct red-team-style operations and realistic attack campaigns.
• Develop offensive tooling and automation to scale security work.
• Design and build AI/LLM-powered agents to detect and remediate findings.

Skills

Vulnerability research

Web/API pentesting

Code proficiency

Cloud security

CI/CD security

AI/LLM usage

Communication

Job description

About CloudWalk

We are not just another fintech unicorn. We are a pack of dreamers, makers, and tech enthusiasts building the future of payments. With millions of customers and a hunger for innovation, we're now expanding our neural network - literally and metaphorically.

This is not a traditional pentesting role. At CloudWalk, you'll go beyond running scans or writing reports. You'll break into systems, exploit real weaknesses, and then engineer automations and agents to make sure those classes of vulnerabilities never come back. Your work will directly shape how CloudWalk defends itself at scale, turning offensive security knowledge into defensive engineering.

You’ll be part of a team that blends red teaming, mobile/web pentesting, and security automation. If you enjoy moving fast, exploiting hard problems, and coding the solutions, this role is for you.

What You’ll Do

• Break things that matter. Pentest applications across our stack, identifying vulnerabilities in APIs, mobile apps (Android/iOS), and infrastructure before attackers do.
• Run red team operations. Plan and execute realistic attack campaigns: phishing with custom domains, social engineering, lateral movement, privilege escalation. Measure real organizational resilience, not checkbox compliance.
• Build offensive tooling. Engineer security platforms, scanning pipelines, and automation that multiply the team's impact.
• Weaponize AI for defense. Design and build LLM-powered agents that detect, classify, triage and fix vulnerabilities in real time.

What You Need to Succeed

• Strong knowledge of common vulnerabilities, exploitation techniques, and secure coding practices. You can find bugs in source code, not just with a proxy.
• Experience with web application and API pentesting. Mobile pentesting (Android/iOS) is a strong plus.
• You code daily. Proficiency in Typescript, Go, or similar, not just scripts, but tools and services others can rely on.
• Familiarity with cloud infrastructure security (GCP/AWS/Azure), Kubernetes, and service mesh concepts.
• Understanding of CI/CD pipelines and how to embed security checks into them.
• Experience leveraging LLMs or AI agents for security tasks.
• Excellent communication and collaboration skills to work effectively with engineering teams.

Nice to Have

• Experience with red team operations: phishing infrastructure, social engineering, C2 frameworks.
• Familiarity with payment industry security (PCI DSS, card tokenization, acquiring flows).
• Experience building security platforms or internal tooling (dashboards, bots, vulnerability management systems).
• Contributions to open source security tools, published security research or CTFs.

The Future We See

At CloudWalk, we envision a future where AI empowers every field to reach new heights:

• People teams leveraging AI to transform talent acquisition and employee development.
• Marketing professionals creating data-driven, AI-powered campaign strategies.
• Customer Success teams enhancing client experiences with intelligent solutions.
• Risk analysts combining human expertise with AI to navigate complexities.
• Designers collaborating with AI to push creative boundaries.

Join us at CloudWalk, where we're not just engineering solutions; we're building a smarter, AI-driven future for payments—together.

By applying for this position, your data will be processed as per CloudWalk's Privacy Policy that you can read here in Portuguese and here in English.

We use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, assessing responses, and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.