Staff Offensive Security Engineer

Staff Offensive Security Engineer - Direct-Hire/FTE - Remote (US)

Title: Staff Offensive Security Engineer

Location: Remote (US)

Compensation: $250-280K Annual Base Salary

Work Requirements: U.S. Citizen, GC Holders, or Authorized to Work in the U.S.

The Team

Our Team runs a Security Engineering program across multiple teams and disciplines. Our Security Engineering team consults on, designs, and builds secure infrastructure and central services that protect our systems, platforms, services, data, and fans. We're builders at heart: we prove ideas by shipping them.

The Job

You'll expand the Red Team Program with AI tooling that lets the rest of engineering test like an attacker. Millions of people hit our platform, and attackers target it for the same reason. You'll show us where our defenses fail before someone else does, make that testing repeatable, and show us in code how to fix what you find. This is a staff-level role: you lead by example from threat analysis to hands-on code, lead through influence rather than authority, and are as comfortable writing an exploit as presenting its business impact to SVP- and C-level executives.

The ideal candidate will be:

• An operator who has run real offensive engagements
• A leader who understands the practical dynamics of a red team program
• A software engineer who builds AI-driven tools other engineers trust.

This isn't a role for running scanners and writing reports. Security here enables teams rather than blocking them: every finding arrives with a workable fix, and recurring weaknesses become secure defaults. You'll write production software, contribute to a developing agent harness that other engineers use to run AI-assisted security testing safely, and treat it like any product you'd ship. You'll work with a broader team of software security engineers to build scalable adversarial testing capabilities while also helping to drive strategic approaches to defect removal.

What success looks like

In six months, product and security leaders use your risk briefings to set priorities, and they bring you in early because they trust your judgment. Engineers outside the security team run your testing workflows without asking you for help, and the harness under them keeps every action scoped, logged, and reviewable.

What you'll do

Run offensive operations

• Plan and lead red team engagements and adversary emulation modeled on real threat actors and current tradecraft.
• Show how weaknesses chain across teams and systems into business impact.
• Turn findings into risk-ranked remediation, with a fix or pull request the owning team can adopt as-is or build on.
• Contribute as an SME on security analysis during severe incidents and design the durable control changes that follow.

Expand the red team program

• Evolve the program's strategy, rules of engagement, and cadence with system owners, defenders, and incident responders.
• Define how we measure exposure across teams, and give leaders the evidence to fund, fix, or accept risk.
• Turn recurring weaknesses into secure defaults and paved roads.
• Build reusable attack tooling and infrastructure so the program outlasts any single engagement.
• Mentor engineers and grow offensive skills across security and engineering.

Build AI-driven patterns for other engineers

• Design and ship an agent harness for offensive security work, with the safety controls, evaluation, and audit trail other engineers need to trust it.
• Turn common offensive tasks into agent workflows other engineers can run and extend.
• Red team AI systems, including agents and the tools they call.
• Set AI security standards and make build-or-buy recommendations on AI security tooling.
• Hold AI-generated output to the same review bar as human work.

What you need to know

• 12+ years in security, with significant hands-on offensive experience: red teaming, penetration testing, adversary emulation, vulnerability research.
• Strong software engineering in Python, Go, or Rust, with tools in production that other people depend on.
• Hands-on experience building with LLMs and agents, including the controls that keep an agent within its authorized scope.
• Deep expertise attacking cloud infrastructure and identity, such as AWS and Kubernetes, and experience with Windows, Active Directory, and Linux environments.
• Working knowledge of detection engineering, such as EDR and SIEM, so your testing improves defenses and helps the organization prioritize the top risks for remediation quickly.
• Proven ability to influence large engineering organizations without authority.
• Communication that turns technical findings into business decisions, for audiences up to C-level executives.

Nice to have

• Offensive security certifications such as OSCP, OSEP, or CRTO, or equivalent work you can show us.
• Published research, CVEs & exploits discovered portfolio, conference talks, or open-source security tools.
• Experience with high-traffic consumer, payment, or regulated platforms.

You

• Builder first. You'd rather prototype a tool than describe one, and you write code you'd hand to another engineer.
• Enabler, not gatekeeper. Your default answer is "here's how to do it safely. "
• AI-forward. You use AI to multiply your own work, and you know where it breaks.
• Adversarial and disciplined. You think like an attacker and operate inside clear rules of engagement.
• Program owner. You set direction in ambiguity and own outcomes without waiting for a mandate.
• Executive presence. You engage senior executives directly and treat stakeholders as customers you're accountable to.
• Partner to defenders. You measure success by how much better detection and response gets, not by how many findings you log.

About INSPYR Solutions

Technology is our focus and quality is our commitment. As a leading global expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our tailored offerings include a wide variety of professional services, project solutions, managed services, and talent resources, all bolstered by our strategic partnerships with cutting-edge technology services. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at www.inspyrsolutions.com. INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities. Applicants requiring reasonable accommodation during the application or interview process should contact HR@inspyrsolutions.com for assistance.

Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions' Privacy Policy and INSPYR Solutions' AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.

26-160374