Staff Offensive Security Engineer

Responsibilities

We are representing a confidential IoT platform organization in their search for a Staff Offensive Security Engineer. In this role, you will drive the technical direction for application security and vulnerability management programs across a complex, multi-surface environment.

Your responsibilities will include:

• Leading strategy, operation, and continuous improvement of vulnerability management and core application security programs—defining processes rather than simply executing them
• Owning and driving down mean time to remediate (MTTR) across the vulnerability backlog as SLAs tighten
• Building and championing automation and tooling that scale vulnerability detection and response across cloud, firmware/IoT, and corporate systems
• Setting technical and architectural direction for the program, translating strategic priorities into concrete execution plans
• Driving remediation by building trust with engineering teams and providing clear, actionable guidance
• Mentoring and leveling up other engineers on secure design and remediation practices
• Communicating risk and remediation tradeoffs to engineering leadership in actionable terms
• Participating in security incident investigations involving high-profile vulnerabilities
• Being regularly on call to support critical vulnerability response

What We're Looking For

Required qualifications:

• 10+ years of relevant experience as a cloud engineer or security engineer, including hands-on vulnerability management across a broad, multi-product enterprise environment
• Proficiency in Go, Python, and JavaScript
• Demonstrated ability to independently set technical and architectural direction for a security program
• Experience driving remediation across a broad, multi-surface environment without direct authority over implementation teams
• Significant experience with modern vulnerability management tooling (e.g., Wiz, Semgrep)
• Deep familiarity with vulnerability scoring frameworks such as CVSS and EPSS
• Strong AWS cloud services background
• Deep understanding of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA)
• Hands-on use of AI/LLM tooling in your own security workflow—triage, detection logic, remediation drafting
• Location: must be based in central or eastern UK timezones

Preferred qualifications:

• Experience with C/C++, relevant to firmware and embedded systems
• Background at a cloud-native, AI-forward company actively building agentic or AI-driven products
• Experience with security automation platforms (e.g., Tines) and serverless frameworks (e.g., AWS Lambda)
• Experience integrating vulnerability management into modern CI/CD pipelines with a "shift-left" mentality
• Experience spanning SaaS, firmware, and corporate IT security programs
• Experience managing vulnerabilities within a FedRAMP-certified environment
• Experience building, extending, or wiring up AI copilots/agents for security workflows

How We Work With You

When you apply through Get A Job.ai, our talent team will review your application and conduct an initial screening. If we believe you're a strong match, we'll submit your profile to our client for consideration. Please do not contact the client directly—all communication and coordination will flow through our recruiting team to ensure the best experience for you and the fastest path to an offer.

This is a remote position open to candidates residing in the UK. Relocation assistance will not be provided for this role.

Pay

Pay via Get A Job.ai has not been disclosed for this position at this time. Compensation details will be discussed during the screening process.

Equal Employment Opportunity

Get A Job.ai is committed to inclusive hiring practices. We welcome applications from candidates of all backgrounds and work with our clients to ensure fair and equitable recruiting processes.