Offensive Security Engineer — AI-Driven Testing & Automation

Liftoff; Oregon; Hybrid; USD 200,000 - 250,000; Full time

Benefits offered by this job

Medical coverage

Wellness stipends

Job summary

Liftoff is seeking a Security Engineer, Offensive Security, to own internal offensive testing—from planning to remediation—across apps, cloud, and infrastructure. You will build AI‑assisted security testing workflows and collaborate with engineering to reduce risk using automated tooling.

Lead the move from point‑in‑time tests to continuous, AI‑driven security testing, while supporting incident response and on‑call rotations. Strong coding, testing, and architectural analysis skills are required.

Qualifications

• 5+ years of security engineering experience with hands‑on penetration testing of applications and infrastructure.
• Excellent judgment in prioritizing testing by risk and impact, safely validating exploits.
• Experience owning assessments from findings through remediation and retesting.
• Write production‑quality code for security tools and automation; review PRs and navigate large codebases.
• Strong understanding of application/API security, authentication/authorization, network security, and common vulnerability classes.

Responsibilities

• Independently plan and execute internal penetration tests across applications, APIs, cloud infrastructure, and corporate systems; prioritize assessments by risk and business impact.
• Define testing scope and rules of engagement with system owners and assess production risk.
• Combine hands‑on testing with source‑code review and architectural analysis to identify vulnerabilities and attack paths.
• Partner with engineering teams to explain findings, agree on fixes, and retest until risk is resolved.
• Maintain knowledge of Liftoff’s systems and attack surface; turn findings into repeatable tests and workflows.

Skills

Penetration testing

Application security

Cloud security

Automation

Software development

Tools

Go

Python

Clojure

JavaScript

Job description

Liftoff is seeking a Security Engineer, Offensive Security, to own internal offensive testing—from planning to remediation—across apps, cloud, and infrastructure. You will build AI‑assisted security testing workflows and collaborate with engineering to reduce risk using automated tooling.

Lead the move from point‑in‑time tests to continuous, AI‑driven security testing, while supporting incident response and on‑call rotations. Strong coding, testing, and architectural analysis skills are required.