Staff Engineer - Offensive Security

📋 Description

• Manual & automated testing of web apps, APIs, and mobile apps.
• Network & cloud-level audits using various tooling.
• Validate reports to reduce false positives; escalate true positives.
• AI/LLM probing: prompt injection tests using OWASP Top 10 for LLMs.
• Draft reproducible 'path to compromise' reports for developers.
• Maintain testing infra: Burp Suite and C2 listeners.

🎯 Requirements

• 7-10 years in offensive security, pentesting, or AppSec.
• MITRE ATT&CK; OWASP Top 10 for web & LLMs; post-exploitation.
• Burp Suite Pro, Nmap, Metasploit, Wireshark; LangChain.
• Python or Bash scripting; Python/C++ for exploits.
• OffSec certs OSCP, OSEP, OSWE, GXPN desirable.
• Telecom experience preferred.

🎁 Benefits

• Healthcare coverage.
• 401(k) retirement plan.
• Generous time off and parental leave.
• Wellness leave.