Source Job

United States

  • Design, build, and operate an AI-augmented red teaming harness using advanced LLM APIs for autonomous vulnerability discovery.
  • Conduct adversarial testing across external, internal, and privileged perspectives, chaining and validating vulnerabilities.
  • Collaborate with DevSecOps, SOC, and engineering teams to improve security automation and detection workflows.

Python Go LLM APIs Penetration Testing Cloud Security

20 jobs similar to Red Team Engineer / Offensive Security Lead

Jobs ranked by similarity.

US

  • Design, build, and operate an AI-augmented red teaming harness using frontier LLM APIs.
  • Conduct adversarial testing across four attack perspectives to discover and chain vulnerabilities.
  • Assume ownership of security stage-gates within our CI/CD pipeline.

We provide a cloud-native platform called Silo that enables digital analysts to securely and anonymously investigate threats. We serve over 750 organizations and value integrity, collaboration, and innovation.

$155,520–$228,700/yr
US

  • Perform full-stack penetration testing of web applications, APIs, and mobile apps.
  • Conduct internal/external network audits and vulnerability validation.
  • Develop custom exploits, adversary emulation, and AI/LLM security testing.

Twilio is shaping the future of communications by delivering innovative solutions to hundreds of thousands of businesses and empowering millions of developers worldwide. The company values a remote-first work culture, global inclusion, and diverse experiences.

$169,000–$208,000/yr
United States

  • Build and evolve the agent harness and orchestration that turns an LLM into a reliable autonomous pentester.
  • Design tools and validation layers to keep the agent reliable, with structured outputs and production-safety.
  • Own and grow evaluation infrastructure to measure and drive agent improvements.

Horizon3.ai is a fast-growing remote cybersecurity company that provides autonomous penetration testing through its NodeZero platform. The company fosters a culture of respect, collaboration, and ownership, with a team of former cyber operators and engineers.

US

  • Lead penetration testing across web apps, APIs, and infrastructure.
  • Deliver detailed reports with proof-of-concept exploitation scenarios.
  • Mentor junior consultants and contribute to security research.

VerTALENTS is a subsidiary of VerSprite Cybersecurity that specializes in technology staffing, connecting top technical talent with clients. They work with clients to fill both full-time and contracting opportunities, adding value to both clients and candidates.

US

  • Secure AI systems and use AI to scale security, conducting security reviews and threat modeling of AI-integrated product features.
  • Deliver end-to-end application security reviews for high-risk features, working directly with engineering teams to surface and close risk.
  • Advance CI/CD pipeline security by operating and evolving security scanning controls in GitLab pipelines.

Smartsheet empowers teams to manage work and scale solutions by uniting human teams with AI agents. They are a large company with over 20 years of experience, fostering a culture where ideas are heard and contributions have real impact.

US 5w PTO

  • Own key security domains such as vulnerability management, application security, API security, and supply chain security.
  • Partner with engineering teams to integrate security into design reviews, threat modeling, CI/CD pipelines, and developer workflows.
  • Develop and improve security tooling and automation to reduce manual effort and leverage AI for triage and detection.

NinjaTrader is an industry-leading trading platform and futures broker that empowers traders with award-winning software and brokerage services. Since 2003, the company has grown to over 2 million users and is the number one rated futures brokerage worldwide, fostering a dynamic culture focused on social connection, professional development, and employee recognition.

US Unlimited PTO

  • Lead and execute full-lifecycle red team engagements including scoping, planning, execution, and reporting.
  • Simulate advanced persistent threat tactics against enterprise network and cloud environments with custom tooling.
  • Collaborate with blue teams for purple team assessments and mentor junior consultants.

UltraViolet Cyber is a platform-enabled unified security operations company providing comprehensive security solutions for organizations. Founded and operated by security practitioners with decades of experience, the company serves Fortune 500, Federal Government, and Commercial clients and has global offices across the U.S. and India.

US 4w PTO

  • Lead application security reviews, threat modeling, and secure code review for new features and significant product changes.
  • Operate and improve SAST, DAST, and SCA tooling, triage findings, and partner with engineering teams to harden the codebase.
  • Plan and execute internal penetration tests against web applications, APIs, and mobile clients, and own the vulnerability management lifecycle.

ButterflyMX empowers people to automate property access, operations, and security from a single platform, serving over 20,000 properties worldwide. As a distributed, primarily remote workforce, they seek intelligent, passionate, and collaborative individuals driven by a shared commitment to excellence and innovation.

$100,000–$150,000/yr
United States

  • Design and implement security controls for AI systems, including LLMs and ML pipelines.
  • Develop threat models and guardrails to protect against adversarial ML risks like prompt injection and model abuse.
  • Collaborate with cross-functional teams to ensure secure and responsible deployment of AI capabilities at scale.

Jobgether is a platform that uses AI-powered matching to connect candidates with job opportunities. They partner with companies to manage applications and next steps, focusing on efficient and fair hiring processes.

$60,000–$211,000/yr
Canada

  • Embed secure-by-design principles across cloud, SaaS, and AI-driven systems.
  • Lead threat modeling sessions and security design reviews for applications, APIs, and microservices.
  • Define security standards, mentor engineers, and drive organization-wide risk reduction programs.

Jobgether uses an AI-powered matching process to connect candidates with hiring companies quickly and objectively. They are a remote-first, globally distributed company with an inclusive engineering culture.

$190,800–$267,100/yr
US

  • Review and threat model AI-powered product features, LLM integrations, and agentic workflows before launch.
  • Build reusable AI security primitives like guardrails, scanners, and policy checks to secure AI development.
  • Design security tooling to detect and prevent prompt injection, jailbreaks, and data leakage in AI systems.

Reddit is a community of communities built on shared interests, passion, and trust, hosting open conversations. With over 100,000 active communities and 126 million daily active users, it is one of the largest sources of information online.

$192,000–$240,000/yr
United States

  • Perform penetration testing and design reviews to identify vulnerabilities and insecure designs.
  • Maintain and build internal tools to automate security efforts, including SAST and DAST testing.
  • Identify vulnerabilities, demonstrate business impact, and articulate risk to drive prioritization.

Brex is the intelligent finance platform that enables companies to spend smarter and move faster in over 200 markets. With tens of thousands of customers including DoorDash, Coinbase, and Zoom, Brex fosters a diverse and inclusive team culture where collaboration with some of the brightest minds in the industry is key.

$100,000–$130,000/yr
US

  • Perform offensive security assessments on cloud infrastructure, web applications, APIs, and traditional networks for clients across various industries.
  • Develop detailed penetration testing documentation and collaborate with teams to integrate security into CI/CD pipelines.
  • Contribute to building a new offensive security service line within a top-rated CPA and advisory firm.

Aprio is a top 20 CPA-led advisory firm serving fast-growing industries with expertise in assurance, tax, and advisory services. The firm has over 3,200 team members across 40+ offices globally, and is recognized as a Best Place to Work with a collaborative culture.

$218,000–$273,000/yr
US Canada Unlimited PTO

  • Own and improve the secure software development lifecycle, perform application security reviews, threat modeling, and deep code-level analysis for high-impact product, platform, and AI features.
  • Drive vulnerability management across internal reviews, bug bounty, pentests, and other research signals, ensuring findings are validated, prioritized, and tracked through remediation.
  • Configure and improve AppSec tooling and integrations, and use AI to automate and scale security processes while validating outputs with strong engineering judgment.

Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies and millions of users globally. Founded in 2015, the company is one of the fastest growing companies in SaaS, raising approximately $250 million to date and valued at $1.6 billion.

United States

  • Perform scoped and open-ended assessments on internal and external facing systems.
  • Perform threat and vulnerability research to identify new ways of achieving the program’s mission.
  • Work with the customer Blue Team to identify gaps, address findings, and improve breach response.

Cyber Advisors is a rapidly growing Cybersecurity Consulting firm that simulates real-world attacks to uncover vulnerabilities. They believe in inclusion, employee development, and have a caring, happy culture where people feel valued.

Spain

  • Play a key role in protecting and strengthening large-scale cloud-native applications that power next-generation AI infrastructure.
  • Work at the intersection of software engineering and cybersecurity, ensuring security is embedded throughout the software development lifecycle.
  • Collaborate cross-functionally to identify and remediate vulnerabilities in complex distributed systems.

Our partner is a company building large-scale cloud-native applications that power next-generation AI infrastructure. They have a high-impact security engineering environment with a collaborative and innovative culture focused on trust, learning, and impact.

$196,000–$242,000/yr
Global Unlimited PTO

  • Perform hands-on web application penetration tests on real customer applications to find vulnerabilities.
  • Identify coverage gaps in autonomous testing and manually reproduce edge cases for product improvement.
  • Partner with engineers to translate findings into product coverage and build regression test cases.

Horizon3.ai is a cybersecurity company that provides the NodeZero platform for autonomous penetration testing. They are a fast-growing, remote team of former U.S. Special Operations cyber operators, startup engineers, and cybersecurity practitioners committed to a culture of respect, collaboration, ownership, and results.

Brazil

  • Execute penetration tests across web applications, APIs, and infrastructure environments, gaining autonomy in delivery and execution.
  • Perform security assessments including Web Pentest, API Pentest, and Infrastructure/Active Directory testing.
  • Participate in Red Team exercises, applying Tactics, Techniques, and Procedures aligned with real-world threat scenarios.

Jobgether is an AI-powered job matching platform that connects candidates with hiring companies. It uses technology to ensure fair and efficient application reviews, with a focus on matching top-fitting candidates to roles.

$120,000–$150,000/yr
Global

  • Design, build, and deploy AI/ML solutions focused on large language models using Python and AWS.
  • Architect scalable APIs and microservices with FastAPI and integrate LangChain for advanced model interactions.
  • Collaborate with cross-functional teams to apply math, statistics, or physics knowledge to improve model performance and reliability.

Our client is a rapidly growing, venture-backed AI company helping shape the next generation of intelligent systems by combining human expertise with machine learning workflows. Backed by over $40 million in funding and a expanding global network, they build critical human intelligence infrastructure for the AI economy.

India

  • Partner with engineering, product, and DevOps teams to integrate security practices throughout the SDLC, focusing on cloud-native environments and automated pipelines.
  • Design, implement, and maintain security tooling and gates within CI/CD pipelines covering SAST, DAST, SCA, secrets detection, and container scanning.
  • Lead threat modeling, conduct application security assessments including code review and manual penetration testing, and triage bug bounty reports.

Hyland is the pioneer of the Content Innovation Cloud, delivering ubiquitous enterprise intelligence to organizations. With a team of nearly 4,000 employees, the company fosters an employee-centric culture focused on community impact and innovation.