Senior Lead Application Pen Testing, Cybersecurity Research Engineer

This is a fully remote position, open to applicants in Arizona, +3 more states.

📋 Description

• Lead the creation of application penetration testing methodologies and solutions across a diverse array of technology stacks.

• Develop a mentoring program for the application penetration testing team and key partners to enhance skills in offensive AI, scanning, and security research.

• Provide counsel to senior management regarding the strengths, weaknesses, opportunities, and risks related to penetration testing.

• Act as a critical counterpoint to security strategy proposals, pinpointing gaps, assumptions, and potential risks.

• Stay informed about industry best practices and emerging techniques to improve security testing capabilities.

• Guide junior team members and foster organizational awareness of security issues.

• Utilize AI-assisted development and analysis tools to streamline system design, coding, testing, analysis, and troubleshooting processes.

• Assess and integrate AI-assisted outputs into solutions using sound technical judgment.

• Consider model limitations, security risks, and operational factors.

• Employ AI in a responsible manner within development and production environments, adhering to security, compliance, privacy, and ethical standards.

• Be prepared to travel up to 10% of the time.

⛳️ Requirements

• Over 7 years of experience in Cyber Security Research, or equivalent demonstrated through work experience, training, military service, or education.

• Extensive knowledge in application penetration testing, offensive security research, and adversary emulation.

• Proven experience in developing security tools, automation, or offensive security frameworks using contemporary programming languages.

• Familiarity with assessing AI/ML systems, Generative AI applications, LLM security risks, prompt injection, model misuse, and AI red teaming methodologies.

• Proficient in AI-assisted development and analysis tools, such as GitHub Copilot and other approved code-centric agents.

• Strong stakeholder management and executive communication abilities with a knack for influencing senior leaders within large organizations.

• Experience in mentoring and cultivating security testing teams in highly regulated settings.

• Willingness to travel up to 10% of the time.

• Burp Suite Certified Professional, OSCP certification, or equivalent security certifications are preferred.

• GCP and Azure certifications are also desired.

🏝️ Benefits

• Health benefits.

• 401(k) Plan.

• Paid time off.

• Disability benefits.

• Life insurance, critical illness insurance, and accident insurance.

• Parental leave.

• Critical caregiving leave.

• Discounts and savings.

• Commuter benefits.

• Tuition reimbursement.

• Scholarships for dependent children.

• Adoption reimbursement.

• Incentive opportunities may be available.