Remote Offensive Security Engineer — AI-Powered Pen Testing

Devconnectplatform; Redwood City (CA); Remote; USD 200,000 - 250,000; Full time

Job summary

Liftoff is seeking a Senior Security Engineer, Offensive Security to own internal offensive testing across apps, APIs, cloud infrastructure, and corporate systems. You will plan assessments, safely validate vulnerabilities, and mentor teams through remediation with AI-assisted security tooling.

You will develop repeatable tests, contribute to detection improvements, and participate in incident-response exercises, advancing Liftoff's security posture across the stack.

Qualifications

• 5+ years of security engineering with hands-on pen testing of apps and infra.
• Ability to write production-quality security tooling and automation; review PRs and work in large codebases.
• Strong understanding of application/API security, auth, network security, and common vulnerabilities.

Responsibilities

• Plan and execute internal penetration tests across applications, APIs, cloud, and corporate systems; prioritize by risk.
• Define scope and rules of engagement with system owners; assess production risk and safe validation methods.
• Combine manual testing with code review and architectural analysis to identify vulnerabilities and attack paths.
• Collaborate with engineering to explain findings, agree fixes, track remediation, and retest.
• Build testing tools and workflows that integrate with automated testing and remediation validation.
• Support annual third-party penetration testing and coordinate remediation of findings.
• Lead adoption of AI-assisted offensive security tooling and measure coverage and accuracy.
• Work across application, cloud, and infrastructure security and participate in on-call rotations.

Skills

Go

Python

Clojure

JavaScript

Job description

Liftoff is seeking a Senior Security Engineer, Offensive Security to own internal offensive testing across apps, APIs, cloud infrastructure, and corporate systems. You will plan assessments, safely validate vulnerabilities, and mentor teams through remediation with AI-assisted security tooling.

You will develop repeatable tests, contribute to detection improvements, and participate in incident-response exercises, advancing Liftoff's security posture across the stack.