Offensive Security Engineer — AI-Driven Pen Testing

Liftoff; Sacramento (CA); Presencial; USD 184.000 - 250.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical coverage

Wellness stipends

Country-based perks

Descripción de la vacante

Liftoff is a leading AI-powered performance marketing platform for the mobile app economy, seeking a Security Engineer, Offensive Security. The role covers internal penetration testing across applications, APIs, cloud infrastructure, and corporate systems, with an emphasis on automated, AI-assisted workflows.

Responsibilities include testing scope definition with system owners, risk-based prioritization, code review, and collaboration with engineering to remediate findings.

Formación

• 5+ years of relevant security engineering experience, including substantial hands-on penetration testing of applications and infrastructure.
• Write production-quality code for security tools and automation, review pull requests, and navigate large, unfamiliar codebases.

Responsabilidades

• Independently plan and execute internal penetration tests across applications, APIs, cloud infrastructure, and corporate systems; prioritize assessments by risk and business impact.
• Define testing scope and rules of engagement with system owners, assess production risk, and choose safe methods for validating vulnerabilities.
• Combine hands-on testing with source-code review and architectural analysis to find vulnerabilities and demonstrate realistic attack paths.
• Partner with engineering teams to explain findings, agree on practical fixes, track remediation, and retest to confirm the risk is resolved.
• Maintain knowledge of Liftoff's systems and attack surface, revisit high-risk attack paths as systems change, and turn confirmed findings into repeatable tests.
• Make security testing self-service where practical through reusable tests, documented assessment and retesting workflows, and clear remediation guidance.
• Support the annual third-party penetration test for independent validation and customer and audit requirements; Lead adoption of AI-assisted offensive security tooling: evaluate platforms and build workflows for code analysis, test generation, and finding triage; Work across application, cloud, and infrastructure security as priorities change, including Accelerate and MX, and share the team's on-call and incident-response rotation, including occasional off-hours response and post-incident follow-up.

Conocimientos

Security engineering

Risk prioritization

Code review

Go / Python / JS

Cloud security

Technical writing

Attack surface

Herramientas

Go

Python

Clojure

JavaScript

Descripción del empleo

Liftoff is a leading AI-powered performance marketing platform for the mobile app economy, seeking a Security Engineer, Offensive Security. The role covers internal penetration testing across applications, APIs, cloud infrastructure, and corporate systems, with an emphasis on automated, AI-assisted workflows.

Responsibilities include testing scope definition with system owners, risk-based prioritization, code review, and collaboration with engineering to remediate findings.