Red Team Engineer — AI-Driven Web & Cloud Security

Acrisure, LLC; Atlanta (GA); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Acrisure, LLC is seeking a hands-on Red Team Engineer to perform web app and API penetration testing across a multi-tenant SaaS portfolio, including cloud-hosted services. You will combine manual testing with AI-augmented workflows to identify exploitable vulnerabilities, validate fixes, and collaborate closely with engineering teams.

You will also evaluate AI-integrated features for prompt injection and model abuse risks while contributing to repeatable security testing in CI/CD pipelines.

Qualifications

• Hands-on offensive security engineer with web app and API testing experience.
• Experience with multi-tenant SaaS security assessments.
• Ability to use AI tools to accelerate testing and reporting.
• Experience with cloud platforms (AWS/Azure) and IAM configurations.
• Strong collaboration with engineering teams.

Responsibilities

• Conduct deep manual penetration tests against web applications, REST/GraphQL APIs, and microservices focusing on authentication, authorization, session management and business logic flaws.
• Test multi-tenant isolation boundaries and cross-tenant data access in SaaS platforms.
• Assess and validate OAuth/OIDC, JWT handling, MFA bypass and token lifecycles.
• Build and maintain AI-assisted attack workflows; develop repeatable validation pipelines.
• Provide clear, evidence-based reports with remediation guidance and retest findings.

Skills

Penetration testing

Web security

Cloud security

Automation

AI tooling

Team collaboration

OAuth/OIDC

JWT handling

Tools

AWS

Azure

REST/GraphQL

CI/CD tooling

SAST/DAST

Job description

Acrisure, LLC is seeking a hands-on Red Team Engineer to perform web app and API penetration testing across a multi-tenant SaaS portfolio, including cloud-hosted services. You will combine manual testing with AI-augmented workflows to identify exploitable vulnerabilities, validate fixes, and collaborate closely with engineering teams.

You will also evaluate AI-integrated features for prompt injection and model abuse risks while contributing to repeatable security testing in CI/CD pipelines.