Remote Offensive Security Engineer — AI Exploit Research

Socket.dev; United States; On-site; USD 153,000 - 187,000; Full time

Benefits offered by this job

Medical coverage

401k match

Paid time off

Job summary

Array, a remote-first fintech innovator, is seeking an Offensive Security Engineer to validate security across products and infrastructure. You’ll think like an attacker, use AI to analyze large codebases, and develop safe exploits with real business impact.

In this full-time role, you’ll partner with engineering to remediate findings, demonstrate exploit paths, and contribute to a strong security culture. Competitive compensation and an ISO grant are included.

Qualifications

• 5+ years of offensive security, application security, penetration testing, or red team experience with a track record of finding real application vulnerabilities.

Responsibilities

• Identify, validate, and demonstrate realistic attack paths against Array's products, infrastructure, and internal systems with a focus on business impact.
• Analyze large, multi-language codebases using AI and manual techniques to uncover vulnerabilities, generate exploit hypotheses, and perform variant analysis.
• Build safe proof-of-concept exploits that demonstrate unauthorized access, privilege escalation, data exposure, business logic flaws, or other meaningful security risks.
• Partner with engineering to validate remediations, confirm exploit paths are fully eliminated, and identify similar patterns elsewhere in the environment.
• Document findings with clear evidence, technical root cause, business impact, and practical remediation guidance while continuously improving Array's offensive security capabilities.
• Maintain a habit of using AI tools to think, build, and ship faster—it’s your default, not an afterthought.

Skills

Offensive security

Web apps & APIs

OWASP Top 10

POC exploit development

AI-assisted security

Communication skills

Job description

Array, a remote-first fintech innovator, is seeking an Offensive Security Engineer to validate security across products and infrastructure. You’ll think like an attacker, use AI to analyze large codebases, and develop safe exploits with real business impact.

In this full-time role, you’ll partner with engineering to remediate findings, demonstrate exploit paths, and contribute to a strong security culture. Competitive compensation and an ISO grant are included.