Senior Security Engineer – Red Team
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Red Team Engineer securing Coupa’s AI-powered spend management platform. Testing web, mobile, API, and AI/LLM systems while developing autonomous security-testing agents.
Responsibilities:
- Execute sophisticated penetration tests and red team exercises
- Develop new attack techniques and testing methodologies
- Conduct penetration testing on web applications, mobile apps, AI/LLM systems, and APIs
- Assess Coupa's AI and LLM integrations for prompt injection, jailbreaking, data poisoning, and model evasion
- Develop, deploy, and manage AI agents for continuous autonomous security testing and vulnerability discovery
- Identify network and system vulnerabilities and recommend countermeasures or mitigating controls
- Perform penetration and remediation testing, reporting, and advanced penetration techniques
- Guide development teams on secure coding best practices, including AI/ML model security
- Serve as an escalation point during critical security incidents and lead root-cause analysis and threat hunting
- Maintain, support, and extend application security tooling, standards, and processes including SAST, DAST, WAF, and AI-based security analysis platforms
Requirements:
- 3–8 years of experience in an equivalent security-related role, including hands-on AI-driven security testing
- Bachelor's or Master's degree in Computer Science (or equivalent), or equivalent experience
- Hands-on experience developing or utilizing autonomous, agentic systems for security penetration testing
- Experience building and maintaining cross-functional relationships
- Strong experience in web/API security, including attacks against AI/ML systems
- Familiarity with AWS, Azure, or GCP cloud environments
- Hands-on experience handling and managing bug bounty programs
- Proficiency in one or more scripting languages, with a strong preference for Python for AI/ML development
- Knowledge of OWASP Top 10, SANS Top 25, and OWASP Top 10 for Large Language Models
- Familiarity with PTES, OSSTMM, NIST, OSINT, and OWASP frameworks
- Ability to translate technical security findings into actionable business risks for non-technical stakeholders and executives
- Ability to work in a team environment
- Relevant security certifications such as CEH, OSCP, GPEN, LPT, or EWPTX are a plus, but not required
Benefits:
- Two company-wide paid wellness days off each year
- Paid day off on your birthday or another day within your birthday month
- 40 hours of paid volunteer time off annually
- Free, confidential, 24/7/365 Employee Assistance Program counseling and resources
- Business travel medical, safety, pre-trip planning, and emergency support through Zurich Travel Assist
- Monetary referral bonuses for successful referrals
- Location-specific benefits packages including medical/dental insurance, retirement/pension plans, and life or accident protection
Similar Jobs
CyberSecurity Consultant – Contractor
Cybersecurity Consultant securing Microsoft Cloud infrastructure and applications for Avertium clients. Leading security architecture, integration, controls, and cybersecurity projects remotely in the United States.
CyberSecurity Consultant
Cybersecurity Consultant securing Microsoft Cloud infrastructure and applications for Avertium clients. Leading architecture, integration, security controls, and cybersecurity strategy projects.
Cloud Security, IAM Architect
Microsoft Cloud Security/IAM Architect securing Dataverse and Dynamics environments for federal IT infrastructure. Designing identity controls, sensitive-data protections, auditing, monitoring, and incident-response documentation.
Staff AI Security Engineer
Staff AI Security Engineer securing Addepar’s global investment data and AI platform. Leading AI security architecture, guardrails, governance, automation, and organization-wide security initiatives.
Information Security Consultant – SMB
Information Security Consultant delivering GRC advisory services for Cognisys, a cybersecurity consultancy. Strengthening client governance, risk management and compliance across recognised security frameworks.
Security Engineer
Security Engineer securing AlertMedia’s risk intelligence and response SaaS platform. Improving AWS, application, compliance, monitoring, and customer security capabilities.
Staff Product Security Engineer
Staff Product Security Engineer building customer identity and authentication services for Affirm’s buy-now-pay-later platform. Designing secure, scalable CIAM backend systems and integrations.
Staff Product Security Engineer
Staff Product Security Engineer building CIAM backend services for Affirm’s buy-now-pay-later platform. Securing authentication, authorization, and account lifecycle flows at scale.
Application Security Consultant
Application Security Consultant advising inovex clients on secure architectures, SDLC, vulnerability management, and software supply-chain security. Developing trainings, reviewing applications, and advancing security consulting products.
Security Engineer
Palo Alto Networks Security Engineer optimizing NGFW security policies and Cortex XDR for Arctiq’s technology-services clients. Automating administration and troubleshooting complex network security issues.
Security Engineer, IAM
Security Engineer governing identity access, privileged reviews, remediation, and exceptions. Supporting audit-ready IAM operations for a U.S.-based organization.
Atlassian Platform Specialist – Jira, Confluence
Atlassian specialist rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing testable requirements and delivering video and live industry demonstrations.
Atlassian Consultant – Requirements Capture, Demonstration, Security Clearance
Atlassian consultant rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing AQAP-compliant requirements and demonstrating the replacement capability to industry.
Defense Information Systems Security Officer – Cloud
Cloud ISSO securing U.S. Marine Corps modernization through RMF, Azure, containers, and AI security. Developing ATO artifacts and monitoring compliance for mission-critical workloads.
Senior Security Professional
Senior security professional managing Honeywell Aerospace access control, CCTV, and cybersecurity systems. Implementing physical security infrastructure, incident response, cloud security controls, and Unified Access strategies.
RACF Mainframe Security Engineer
RACF Mainframe Security Engineer securing Huntington Bank’s IAM capabilities and mainframe technologies. Leading RACF operations, incident response, architecture alignment, and security engineering delivery.
Lead Security Engineer
Lead Security Engineer designing and automating CBIZ’s enterprise security controls across cloud, identity, endpoint, network, email, and data protection. Strengthening security posture through platform engineering, detection, and response support.
AI Pipeline Engineer – Security Automation Platform
AI Pipeline Engineer building reliable threat-intelligence automation for CloudLinux's Imunify360 security platform. Operating large-scale releases, quality gates, observability and rollback systems.
Cybersecurity Research Expert – Offensive Security, Vulnerability Research
Cybersecurity research expert evaluating frontier AI systems’ exploit analyses and vulnerability reasoning. Providing structured feedback and benchmarks for advanced AI security capabilities.
Director, Physical Security
Director building physical and organizational security for Orcrist’s petabyte-scale B2B data intelligence platform. Managing classified-work protection, sites, personnel security, crisis response, vendors, and regulatory compliance.