Remote Staff Offensive Security Engineer

Twilio; United States; On-site; USD 164,640 - 205,800; Full time

Job summary

Twilio is seeking a Staff Offensive Security Engineer to lead complex testing efforts across web apps, APIs and mobile platforms. You will design attack chains, write code, and research bypasses while coordinating remediation guidance with engineering teams.

You’ll perform AI/LLM probing, build automated testing frameworks, and help tune SIEM alerts with SIRT and Detection Engineering. Remote‑first work and global impact are core to Twilio’s culture.

Qualifications

• Experience with offensive security, bug bounty or AppSec in high‑volume environments and demonstrated findings of high/critical vulnerabilities.
• Solid understanding of MITRE ATT&CK, OWASP Top 10 web and LLMs, post‑exploitation, lateral movement and data exfiltration.
• Proficiency with popular offensive tools (Burp Suite Pro, Nmap, Metasploit, Wireshark) and AI security tools; capability to use C2 frameworks.

Responsibilities

• Perform full‑stack penetration testing of web apps, APIs and mobile apps (iOS/Android).
• Conduct internal/external network and cloud assessments with diverse tooling.
• Validate vulnerability reports to reduce false positives and confirm true positives.

Skills

MITRE ATT&CK

OWASP Top 10 for LLMs

Burp Suite

Nmap

Metasploit

AI security tools

Cobalt Strike/Sliver/Havoc

Python/Bash scripting

Python/C++ coding

Telecom knowledge

Tools

Burp Suite Professional

Nmap

Metasploit

Wireshark

LangChain

TensorFlow (adversarial)

Cobalt Strike

Sliver

Havoc

Job description

Twilio is seeking a Staff Offensive Security Engineer to lead complex testing efforts across web apps, APIs and mobile platforms. You will design attack chains, write code, and research bypasses while coordinating remediation guidance with engineering teams.

You’ll perform AI/LLM probing, build automated testing frameworks, and help tune SIEM alerts with SIRT and Detection Engineering. Remote‑first work and global impact are core to Twilio’s culture.