AI Offensive Security Engineer

Job Summary

Ai-Driven Offensive Security Engineer

Ai-Enabled Offensive Security

• Utilize AI coding assistants (e.g., GitHub Copilot, Cursor, Claude, or similar) to accelerate exploit development, payload creation, and security tooling automation.
• Leverage Large Language Models (LLMs) to enhance reconnaissance, source code review, vulnerability discovery, and security research.
• Analyze decompiled binaries, source code, and application logic using AI-assisted workflows.
• Generate and optimize fuzzing harnesses and Proof-of-Concept (PoC) exploits with AI support.

Prompt Engineering & Ai Utilization

• Develop advanced prompt engineering techniques tailored for offensive security use cases.
• Conduct authorized security testing, including controlled evaluation of AI guardrails.
• Rapidly prototype and validate exploit concepts using AI-powered tools.

Validation & Quality Assurance

• Critically assess AI-generated outputs for technical accuracy and exploit reliability.
• Identify and eliminate hallucinated vulnerabilities, APIs, CVEs, or inaccurate recommendations.
• Validate all findings through manual testing and real-world verification.

Reporting & Communication

• Produce clear, client-ready penetration testing and red team reports.
• Create executive summaries, technical documentation, and remediation recommendations using AI-assisted workflows.
• Effectively communicate technical risks to both technical and non-technical stakeholders.

Qualifications

• 5+ years of experience in Penetration Testing, Red Teaming, Offensive Security, or related cybersecurity roles.
• Minimum 6 months of hands-on experience integrating AI tools into offensive security workflows.
• Strong expertise in application, network, cloud, and infrastructure security.
• Proficiency in scripting or programming using Python, Bash, or similar languages.
• Experience with exploit development, vulnerability assessment, and security research.
• Strong understanding of ethical hacking methodologies and responsible disclosure practices.

Preferred Qualifications

• Experience automating Red Team operations using AI, including C2 scripting, OPSEC-aware payload generation, and traffic obfuscation.
• Hands-on experience with offensive AI tools such as PentestGPT, WhiteRabbitNeo, Garak, or custom/local LLM deployments.
• Knowledge of AI-assisted social engineering techniques within ethical and legal boundaries.
• Understanding of secure local vs. cloud LLM deployment and data confidentiality considerations.
• Experience assessing AI/ML systems, including:

• Prompt Injection & Jailbreaking

• Model Extraction
• Data Poisoning

• OWASP LLM Top 10 Security Risks

• Familiarity with AI-powered defensive technologies, including EDR, SIEM, WAF, and anomaly detection systems.
• Ability to evaluate AI detection capabilities through adversarial testing and false-negative analysis.
• Understanding of AI-generated code patterns and modern defensive detection techniques.