Offensive Security Engineer

Role Overview

This position is open for an Offensive Security Engineer located in Ireland, joining a proactive team focusing on advanced offensive security efforts at the intersection of cloud infrastructure and artificial intelligence. The engineer will perform simulated sophisticated cyberattacks on critical systems relied upon by clients, unveiling vulnerabilities before exploitation can occur. This role spans multiple technology stacks including cloud compute, storage, networking, inference, orchestration, and internal tools while aiding the establishment of a comprehensive penetration testing and red team initiative.

Key Responsibilities

• Enhance Secure SDLC threat models by ongoing penetration testing, determining threat levels, mitigation progress, and evaluating underlying security assumptions.
• Develop automation for routine security verifications to keep pace with a dynamic platform, reserving manual efforts for complex vulnerabilities.
• Lead full-scope red team cyberattack simulations covering cloud compute, storage, AI inference, networking layers, orchestration, and internal tooling.
• Discover and assess attack vectors that may affect company operations, customer environments, or critical platform resources.
• Partner with detection, response, and security engineering teams to conduct purple team exercises and verify defensive coverage, addressing security gaps.
• Research innovative attack methodologies targeting GPU technology including firmware, vendor drivers, device passthrough, SR-IOV/IOMMU setups, and RDMA/InfiniBand environments.
• Identify vulnerabilities within AI inference systems, model serving infrastructure, and managed orchestration solutions.
• Evaluate tenant isolation mechanisms and investigate potential low-level attack avenues risking boundary breaches.
• Perform offensive security assessments on new products and major infrastructure changes before production deployment.
• Create tailored offensive security tools and post-exploitation capabilities to enhance testing effectiveness and scalability.
• Produce clear, prioritized reports for technical teams and executive leadership, offering actionable remediation advice.
• Develop and continuously improve red team practices, methodologies, tooling, and operational workflows as the platform expands.

Experience & Skills Requirements

• Over 6 years of experience in offensive security roles including penetration testing, red teaming, adversary simulation, or related fields.
• In-depth practical expertise attacking cloud-native technologies, especially Kubernetes privilege escalations, cloud IAM manipulations, virtualization exploits, and container breakouts.
• Comprehensive knowledge of the attack lifecycle stages such as initial access, persistence, lateral movement, and data exfiltration.
• Ability to develop custom security tooling and exploitation frameworks using programming languages like Python or Go.
• Experience conducting collaborative purple team engagements with blue teams or defensive units.
• Strong communication skills to deliver complex technical findings via senior-level reports that clarify business risks and provide actionable engineering recommendations.
• Preferred experience in ML infrastructure, model-serving pipelines, or managing GPU clusters.
• Bonus skills include reverse engineering, exploit development, application security, eBPF bypass methods, kernel exploitation, vulnerability research, or CVE discovery.
• Insight into cloud providers' internal workings including hypervisor and network components is advantageous.
• Prior presentation of security research at notable industry conferences such as Black Hat or DEF CON is a plus.
• Demonstrated problem-solving aptitude, curiosity, technical depth, and the self-drive to operate effectively in a fast-changing environment.

Benefits & Culture

• Competitive salary remuneration accompanied by equity participation opportunities.
• Flexible, remote-first working setup.
• Opportunities for professional growth, ongoing education, and skill development.
• Significant autonomy and flexibility regarding security problem-solving approaches.
• Exposure to innovative attack surfaces including GPU infrastructure, AI platforms, and complex multi-tenant cloud environments.
• Collaboration with expert engineers developing cutting-edge AI infrastructure.
• Chance to impact AI and cloud security on a meaningful scale.
• Diverse international teams promoting inclusion, cooperation, innovation, trust, and continuous progress.

Additional Information

This role is handled on behalf of a partner company that manages applications and subsequent selection procedures independently. The recruitment process uses AI-assisted candidate matching to ensure fair and speedy review based on core qualifications, with hiring decisions and interview arrangements administered by the partner organization.

Applicants' data is processed under legitimate interest and pre-contractual GDPR measures. AI tools may assist during recruitment but do not replace human judgment. For details on data handling, contact the recruiter.