Offensive Security Engineer
New
J
JobgetherAI and cloud security
Based in United KingdomFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 6+ years of experience in offensive security, penetration testing, red teaming, adversary simulation, or a closely related discipline.
- Required Skills
- PythonKubernetesGo
Requirements
- Have 6+ years of experience in offensive security, penetration testing, red teaming, adversary simulation, or a closely related discipline.
- Bring hands-on experience attacking cloud-native environments, including Kubernetes privilege escalation, cloud IAM abuse, virtualization, and container escape techniques.
- Understand the attack lifecycle, including initial access, persistence, lateral movement, and data exfiltration.
- Have proven ability to develop custom security tooling and post-exploitation capabilities using Python, Go, or similar programming languages.
- Have experience conducting purple team exercises and collaborating with blue teams and defensive security functions.
- Be able to communicate complex technical findings in senior-level reports that contextualize business risk and provide actionable guidance to engineers.
- ML infrastructure, model-serving pipeline, or GPU cluster experience is a strong advantage.
- Reverse engineering, exploit development, application security, eBPF bypass techniques, kernel-level exploitation, vulnerability research, or CVE discovery experience is beneficial.
- Understanding of cloud provider internals, including hypervisor and networking layers, is a plus.
- Experience presenting security research at industry conferences such as Black Hat or DEF CON is advantageous.
Responsibilities
- Validate and extend Secure SDLC threat models through continuous penetration testing.
- Automate routine security validations and perform manual analysis for complex, high-impact scenarios.
- Plan and execute red team engagements across cloud compute, storage, inference, networking, orchestration, and internal tooling.
- Identify attack paths that could affect organizational operations, customer environments, or critical platform assets.
- Collaborate with detection and response and security engineering teams on purple team exercises.
- Research attacks against GPU infrastructure, including firmware, vendor drivers, device passthrough, SR-IOV/IOMMU configurations, and RDMA/InfiniBand environments.
- Investigate vulnerabilities in inference technologies and AI platform services, including model-serving infrastructure and managed orchestration platforms.
- Develop offensive tooling and post-exploitation capabilities, and assess tenant-isolation boundaries.
- Produce actionable reports for technical teams and senior leadership, prioritizing findings and recommending remediation.
- Establish and improve red team processes, tooling, methodologies, and operating practices.
View Full Description & ApplyYou'll be redirected to the employer's site
