Senior Offensive Security Engineer (AI)

Location: San Francisco, CA, USA; other listed locations include Mountain View, CA, USA and Remote, Washington, USA.

Base salary: $160,300–$240,500, $181,200–$271,800, or $203,600–$305,400 USD gross annually, depending on work location.

Company

hirify.global develops a leading game engine and enables teams in gaming, automotive, manufacturing, healthcare, and other industries to create, simulate, and collaborate in 3D.

What you will do

• Plan and run objective-based red team and adversary emulation operations across cloud, corporate, and production environments.
• Conduct purple team exercises with Security Operations to improve detection and response.
• Perform deep security testing of web applications, APIs, the engine, editor, client runtime, ads and monetization systems, and developer-facing platforms.
• Identify attack paths across GCP, AWS, Azure, Kubernetes, containers, CI/CD pipelines, identity, and secrets.
• Test LLM integrations, AI-native products, and agent workflows for prompt injection, data leakage, tool misuse, and excessive permissions.
• Write prioritized findings, support remediation and retesting, and build tooling and automation for continuous security checks.

Requirements

• 6+ years of offensive security experience in red teaming, penetration testing, purple teaming, or vulnerability research, including leading engagements end to end.
• Hands-on experience attacking cloud environments using GCP, AWS, or Azure, including identity, Kubernetes, containers, and CI/CD.
• Strong web application and API security testing skills, including finding business logic flaws rather than relying only on scanner results.
• Solid scripting or programming ability in languages such as Python, Go, or C/C++ to build tools and exploits.
• Experience running adversary emulation or red team operations against realistic objectives and working with defenders in purple team exercises.
• Clear written and verbal communication, including the ability to explain technical risk to engineers and non-technical leaders.
• Ability and willingness to collaborate, share ideas, support colleagues, and work as part of a team.
• Sufficient professional English proficiency for frequent written and verbal communication with colleagues and partners worldwide.

Nice to have

• Experience testing LLM-based products, AI agents, or AI-assisted developer tools.
• Reverse engineering, binary exploitation, or game client and anti-cheat security experience.
• Experience in gaming, ad tech, or large developer-facing platforms.
• Bug bounty experience, CVEs, conference talks, published research, or open-source security tooling.
• OSCP, OSEP, OSWE, or CRTO certifications; certifications do not substitute for a proven track record.

Culture & Benefits

• Operate safely in production with clear rules of engagement and focus on real impact rather than the volume of findings.
• Collaborate closely with engineering, Product Security, Infrastructure Security, Security Operations, and other teams while building trust and encouraging early security involvement.
• Health, life, and disability insurance, commute subsidy, employee stock ownership, retirement or pension plans, vacation and personal days, and family-care programs, subject to country and employment-status eligibility.
• Mental health and wellbeing support, employee resource groups, global employee assistance, training and development programs, and volunteering and donation matching.
• The role may be eligible for equity awards and company incentive plans in addition to base salary.