Senior Architect – Offensive Security, AI Testing, Cloud Testing

This is a fully remote position, open to applicants in Tennessee.

📋 Description

• Lead and carry out cloud security assessments and penetration testing, focusing mainly on Microsoft Azure, Entra ID, and Microsoft 365.

• Identify and exploit vulnerabilities in cloud identity, including gaps in conditional access, OAuth application consent misuse, token theft and replay, and hybrid identity attack vectors.

• Evaluate cloud DevOps and infrastructure-as-code environments for potential pipeline compromises, secrets exposure, and privilege escalation risks.

• Conduct security evaluations of AI/ML and LLM-enabled applications and autonomous systems.

• Review cloud platforms and infrastructure supporting AI workloads, assessing access controls, data exposure, network isolation, and enterprise data integrations.

• Act as the technical lead by defining testing strategies, coordinating with client stakeholders, and guiding other testers.

• Create reports detailing attack narratives, risk assessments, evidence, and prioritized remediation recommendations.

• Present findings to engineers, executives, and non-technical audiences.

• Develop and maintain security testing methodologies, playbooks, and checklists for cloud and AI environments.

• Create scripts, tools, and automation to enhance testing and internal processes.

• Investigate emerging cloud and AI attack methodologies and disseminate findings through enablement, blog posts, and conference presentations.

• Mentor junior and mid-level team members and provide reviews of their work.

• Assist with the internal lab infrastructure for offensive security research, development, and evaluation.

• Cultivate strong client relationships, build trust, and facilitate client success.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related technical discipline, or equivalent professional experience.

• Over 8 years of practical experience in offensive security.

• Extensive expertise in cloud penetration testing, ideally in Azure, Entra ID, and Microsoft 365.

• Practical experience in testing AI/LLM applications and autonomous systems.

• Strong knowledge of cloud identity and access management, including OAuth 2.0, OpenID Connect, SAML, conditional access, and token-based authentication.

• Familiarity with LLM applications, including RAG architectures, embeddings, vector stores, tool-calling, and model hosting platforms.

• Proficient in Python, PowerShell, Go, or Bash.

• Solid grounding in network, Active Directory, and web application penetration testing.

• Experience with tools such as Burp Suite, BloodHound, and Metasploit.

• Exceptional written communication and client-ready reporting abilities.

• Outstanding oral communication and presentation skills.

• Strong organizational skills, attention to detail, and effective time management.

• Ability to prioritize tasks in a dynamic, high-volume, and evolving environment.

• Capacity to approach client requests in a proactive and consultative manner.

• Ability to manage shifting priorities and meet deadlines.

• Self-motivated individual comfortable working directly with clients.

• Willingness to travel as necessary.

🏝️ Benefits

• Comprehensive medical, dental, and vision coverage for you and your dependents.

• 401(k) Retirement Plan with Employer Match.

• 529 College Savings Plan.

• Health Savings Account.

• Life Insurance.

• Long-Term Disability.

• Competitive Compensation.

• Opportunities for training and development.

• Major offices stocked with snacks and beverages.

• A collaborative and enjoyable work culture.

• Emphasis on work-life balance and generous paid time off.