Senior Offensive Security Engineer - AI-Driven, Remote-First

Array; United States; Remote; USD 170,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Unlimited PTO

401k match up to 4%

Parental leave

Desk setup subsidy

Wifi stipend

Summer Fridays

Commuter benefits

Job summary

Array, a remote-first fintech security company, is seeking an Offensive Security Engineer to think like an attacker and validate our products through real-world exploitation. You’ll have full access to applications, source code, and infrastructure to identify vulnerabilities that pose real business risk.

You’ll leverage AI to analyze large codebases, develop proof‑of‑concept exploits, and collaborate with engineering to validate remediations while enhancing Array’s offensive security

Qualifications

• 5+ years of offensive security, application security, penetration testing, or red team experience with a track record of finding real application vulnerabilities.
• Deep expertise in modern web applications, APIs, authentication, authorization, distributed systems, and the OWASP Top 10.
• Experience developing proof-of-concept exploits that demonstrate real business impact, not just theoretical risk.
• Proficiency using AI to accelerate vulnerability discovery, exploit development, code analysis, and security research while validating AI-generated output.
• Strong communication skills with the ability to explain complex vulnerabilities, attack paths, and remediation guidance to engineering teams.

Responsibilities

• Identify, validate, and demonstrate realistic attack paths against Array's products, infrastructure, and internal systems with a focus on business impact.
• Analyze large, multi-language codebases using AI and manual techniques to uncover vulnerabilities, generate exploit hypotheses, and perform variant analysis.
• Build safe proof-of-concept exploits that demonstrate unauthorized access, privilege escalation, data exposure, business logic flaws, or other meaningful security risks.
• Partner with engineering to validate remediations, confirm exploit paths are fully eliminated, and identify similar patterns elsewhere in the environment.
• Document findings with clear evidence, technical root cause, business impact, and practical remediation guidance while continuously improving Array's offensive security capabilities.
• Maintain a habit of using AI tools to think, build, and ship faster—it’s your default, not an afterthought.

Skills

Offensive security

Web apps & APIs

Exploit development

AI in security

Communication

Job description

Array, a remote-first fintech security company, is seeking an Offensive Security Engineer to think like an attacker and validate our products through real-world exploitation. You’ll have full access to applications, source code, and infrastructure to identify vulnerabilities that pose real business risk.

You’ll leverage AI to analyze large codebases, develop proof‑of‑concept exploits, and collaborate with engineering to validate remediations while enhancing Array’s offensive security