Remote opportunity at
LiftoffSecurity Engineer, Offensive Security
Liftoff seeks a Security Engineer, Offensive Security to own internal offensive testing and lead the shift from traditional point-in-time penetration testing to continuous, AI-assisted evaluation. Operating…
Career Tools
About This Role
Liftoff seeks a Security Engineer, Offensive Security to own internal offensive testing and lead the shift from traditional point-in-time penetration testing to continuous, AI-assisted evaluation. Operating as part of the security team, this remote position involves protecting customers, users, and employees by defending the organization's infrastructure, web, mobile, and IT environments from a software engineering perspective. Liftoff operates an AI-powered performance marketing platform designed for the mobile app economy, supplying…
Job Description
Liftoff seeks a Security Engineer, Offensive Security to own internal offensive testing and lead the shift from traditional point-in-time penetration testing to continuous, AI-assisted evaluation. Operating as part of the security team, this remote position involves protecting customers, users, and employees by defending the organization's infrastructure, web, mobile, and IT environments from a software engineering perspective.
Liftoff operates an AI-powered performance marketing platform designed for the mobile app economy, supplying end-to-end technology that aids mobile businesses across multiple sectors globally. The ideal candidate will have substantial experience in penetration testing, strong technical writing skills, and a background in writing production-quality code for security tools and automation. Daily activities encompass planning assessments, safely validating vulnerabilities, collaborating with engineering teams through remediation and retesting, integrating AI-assisted offensive security tooling, and joining the team's on-call and incident-response rotation.
The role offers a base salary range of USD 184,000 to 250,000 per year plus bonus, varying by geographical location, alongside comprehensive benefits such as medical coverage, equity, and wellness stipends.
Responsibilities
- Plan and conduct internal penetration tests across applications, APIs, cloud infrastructure, and corporate systems.
- Establish testing scope and rules of engagement with system owners while evaluating production risk.
- Combine hands-on testing with source-code review and architectural analysis to detect vulnerabilities.
- Collaborate with engineering teams to explain findings, agree on fixes, track remediation, and retest.
- Build testing tools and workflows that combine practical assessments with automated testing and remediation validation.
- Manage the annual third-party penetration test to satisfy independent validation and audit requirements.
- Drive the adoption of AI-assisted offensive security tooling for code analysis, test generation, and finding triage.
- Partner with Detection and Response to convert validated attack paths into detection improvements.
- Participate in the security team on-call and incident-response rotation, including off-hours response.
Requirements
- Possess at least 5 years of relevant security engineering experience, featuring extensive hands-on penetration testing.
- Demonstrate judgment in prioritizing tests by risk and validating exploits safely.
- Write production-quality code for security automation and review pull requests.
- Understand application and API security, authentication, network security, and common vulnerability classes.
- Demonstrate hands-on experience evaluating cloud and infrastructure security configurations and attack paths.
- Apply software engineering habits such as testing, observability, version control, and peer code reviews.
- Produce clear technical writing including assessment plans, reproducible findings, and post-incident reviews.
Qualifications
- Experience working with Go, Python, Clojure, or JavaScript.
- Background in building AI-assisted security testing workflows and measuring result accuracy.
- Experience securing large-scale cloud systems, mobile advertising, or high-volume SaaS environments.
Core Skills
Benefits
- Base salary between USD 184,000 and 250,000 per year depending on location
- Bonus compensation
- Equity
- Medical coverage
- Wellness stipends
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, this role is listed as remote.
What is the salary range for this role?
The base salary ranges from USD 184,000 to 250,000 per year plus bonus, depending on your location.
What experience is required to apply?
Candidates must have 5 or more years of relevant security engineering experience, which includes substantial hands-on penetration testing of infrastructure and applications.
Does the posting specify additional benefits?
Yes, benefits include medical coverage, equity, and wellness stipends, with perks varying based on your country of residence.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
