Principal Offensive Security Engineer (AI)

Location: US - Remote

Salary: $183,000–$200,000 per year

Company

hirify.global develops data, automation, and AI solutions that support business decision-making.

What you will do

• Lead risk-prioritized penetration tests and offensive security assessments across products, web applications, APIs, infrastructure, cloud, identity, SaaS, and enterprise technologies.
• Scope and execute red-team campaigns and adversary simulations; identify vulnerabilities, chain weaknesses into realistic attack paths, and assess business impact.
• Develop and validate AI-assisted workflows, custom scripts, tooling, payloads, and automation for reconnaissance, campaign development, social engineering, and analysis.
• Conduct offensive security testing with a primary focus on GCP and modern identity platforms, extending to AWS, Azure, and Kubernetes as relevant.
• Partner with SOC, detection engineering, threat hunting, incident response, engineering, and defensive teams on purple-team exercises, remediation, retesting, and defensive-control validation.
• Own technical direction for the offensive security roadmap, mature methodologies, document findings, communicate risk to technical and executive audiences, and mentor practitioners.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent experience.
• 8+ years of relevant information security experience, including significant hands-on penetration testing, red teaming, adversary simulation, or offensive security experience.
• Experience independently leading complex penetration tests or offensive security engagements.
• Deep expertise in at least one core domain, such as application/API exploitation, cloud offensive security, identity, or enterprise environments, plus working knowledge across other domains and the ability to chain weaknesses into realistic attack paths.
• Strong knowledge of attacker techniques covering initial access, credential access, privilege escalation, persistence, lateral movement, defense evasion, and data access.
• Hands-on experience with at least one major cloud platform—GCP, AWS, or Azure—and modern identity environments, including Active Directory, SAML, OAuth, OIDC, MFA, and SSO.
• Experience with offensive security tooling and frameworks for web, identity, network, and adversary-emulation testing.
• Ability to develop or modify tooling using Python, PowerShell, Bash, Go, or similar languages.
• Hands-on experience incorporating AI into offensive security or red-team operations, including validating workflows or tools and measuring operational benefits.
• Experience planning or leading purple-team exercises, applying MITRE ATT&CK, translating findings into defensive improvements, communicating technical risk, mentoring engineers, and setting technical direction.

Nice to have

• Offensive security or AI security community contributions through presentations, open-source tooling, research, vulnerability disclosures, or working groups.
• Experience building or maturing internal red-team programs, conducting advanced adversary-emulation or assumed-breach exercises, or designing repeatable purple-team validation programs.
• Experience with agent frameworks, LLM APIs, local or hosted models, AI-enabled applications, LLM-integrated systems, or agentic workflows.
• Additional depth in SaaS security, endpoint/EDR evasion, exploit development, or social engineering.
• Strong hands-on GCP offensive security experience and Kubernetes assessment experience.
• Relevant certifications such as OSCP, OSEP, OSWE, OSED, CRTO, GXPN, or comparable certifications.

Culture & Benefits

• Full-time remote employment in the United States.
• Collaborative environment valuing diverse perspectives, technical curiosity, and mentorship.
• Benefits may include bonus or commission, medical and retirement programs, financial and wellness benefits, time off, and employee discounts.
• Employment is contingent on the applicant’s ability to comply with U.S. export controls.
• hirify.global supports a growth mindset and an equitable, inclusive workplace.

Hiring process

• Applications are submitted through the hirify.global careers site.
• Any offer is contingent upon compliance with applicable U.S. export controls.