Senior Security Engineer, Offensive Security

About This Opportunity

We are representing a globally distributed technology company whose developer tools are trusted by millions of users worldwide. Our client is seeking a Senior Security Engineer, Offensive Security to join their remote team in England.

In this role, you'll drive offensive security initiatives by conducting penetration testing, threat modeling, and exploit development across cloud infrastructure and containerized environments. You'll partner with engineering and product teams to surface vulnerabilities before adversaries do, turning findings into durable security improvements that protect a platform used by developers across the globe.

Responsibilities

• Plan, scope, and execute penetration tests and red-team engagements against products and services
• Develop proof-of-concept exploits and produce clear, risk-rated findings with actionable remediation guidance
• Build and maintain offensive security tooling and automation to expand testing coverage
• Perform security reviews and threat modeling across products and services, including emerging AI capabilities
• Partner with engineering to design and implement security architecture and controls
• Contribute to security initiatives including automated security design reviews and vulnerability management
• Serve on rotating on-call schedule to respond to security events and coordinate remediation
• Educate cross-functional teams to promote security best practices
• Write automated security tests and participate in security incident response

What We're Looking For

Required qualifications:

• 3+ years in security engineering with hands-on offensive security and penetration testing across applications and infrastructure
• 2+ years of development experience in Python or Golang
• Deep expertise in authentication, authorization (OAuth), cryptography applications, and Zero Trust principles
• Strong hands-on experience securing cloud ecosystems (AWS, GCP, Azure)
• Hands-on penetration testing experience across SaaS web applications and APIs, including manual exploitation beyond automated scanning
• Proficiency with offensive tooling such as Burp Suite and OWASP frameworks
• Ability to write security tests and develop exploits that find real vulnerabilities
• Understanding of AI/ML security risks including prompt injection, data poisoning, model extraction, and adversarial attacks
• Practical experience using LLMs and agentic tooling to automate vulnerability discovery
• Track record of building security programs and automations from scratch with risk-based prioritization
• Excellent communication skills for explaining complex security concepts to technical and non-technical stakeholders
• Team-oriented approach to driving security improvements through collaboration

Preferred qualifications:

• Offensive security certifications such as OSCP, OSWE, OSEP, GXPN, GPEN, or CRTO
• Published CVEs, original security research, or conference talks
• Experience with container escape, Kubernetes attack paths, or cloud red teaming
• Experience testing AI/ML systems for security vulnerabilities

Important: Our client does not offer visa sponsorship for this role. Candidates must have existing UK work authorization.

How We Work With You

When you apply through Get A Job.ai, our talent team will review your qualifications and conduct an initial screening. If there's a strong match, we'll submit your profile to our client for consideration. We coordinate the interview process and provide support throughout. Please do not contact the client directly—all communication should flow through our recruiting team to ensure a professional, organized process.

Pay

This is a full-time, remote position based in England. Compensation details will be discussed during the screening process.

Equal Employment Opportunity: Get A Job.ai is committed to fair and equitable recruiting practices. We work with clients who value diversity and inclusion, and we evaluate all candidates based on qualifications and merit.