{"id":193314,"url":"https://alion.io/job/casco-offensive-security-engineer","title":"Offensive Security Engineer","company":{"id":2392,"name":"Casco","domain":"casco.com","url":"https://alion.io/company/casco","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Work at a Startup","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":200000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"Cobalt Strike","optional":false},{"name":"Edge AI","optional":false},{"name":"GCP","optional":false},{"name":"LLM","optional":false},{"name":"Metasploit","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Red Teaming","optional":false},{"name":"TypeScript","optional":false},{"name":"Kubernetes","optional":true},{"name":"Machine Learning","optional":true}],"status":"live","first_seen_at":"2026-09-03T00:58:32Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-20T06:34:04Z","board_verified":true,"closed_at":null,"days_open":47,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":47},"description":"About the Role\nWe're seeking an exceptional Offensive Security Engineer to join our fast-growing startup and help shape the future of security testing. This role uniquely combines traditional penetration testing excellence with cutting-edge AI/LLM security expertise. You'll conduct sophisticated manual penetration tests while also working alongside our automated agentic red teaming systems, bridging the gap between human expertise and AI-driven security assessment.\nWhat You’ll Do\nCore Responsibilities\nExecute comprehensive, white-glove manual penetration tests across web applications, APIs, cloud infrastructure, and network environments\nReview, validate, and enhance findings generated by our agentic red teaming platform\nDevelop custom exploits, tools, and methodologies to identify complex security vulnerabilities\nContribute to the development of security-focused software and tooling within our engineering team\nCollaborate with our engineering team to improve and refine our automated security testing capabilities\nProduce detailed, actionable security assessment reports with clear remediation guidance\nPartner with customer engineering teams to ensure security findings are properly understood and addressed\nResearch emerging attack vectors, particularly those involving AI/LLM systems and applications\nTechnical Leadership\nDrive innovation in offensive security methodologies, especially at the intersection of traditional pentesting and AI-assisted security assessment\nMentor team members on advanced penetration testing techniques\nContribute to the company's security strategy and roadmap\nParticipate in the continuous improvement of our security testing frameworks and processes\nWhat We’re Looking For\nRequired Qualifications\n3+ years of professional penetration testing or offensive security experience with a proven track record of identifying critical vulnerabilities\nHands-on experience with AI/LLM security, including prompt injection, model manipulation, data poisoning, or other AI-specific attack vectors\nStrong software engineering skills with proficiency in at least two programming languages, including TypeScript.\nDeep understanding of OWASP Top 10, MITRE ATT&CK framework, and modern attack methodologies\nExperience with common penetration testing tools (Burp Suite, Metasploit, Cobalt Strike, custom tooling)\nExpertise in at least two of the following domains:Web application security\nCloud security (AWS, Azure, GCP)\nNetwork penetration testing\nAPI security testing\n\nPreferred Qualifications\nExperience building or contributing to security tools and frameworks\nKnowledge of machine learning security, adversarial ML, or AI red teaming\nRelevant certifications (OSCP, OSWE, OSEP, GPEN, or equivalent)\nExperience with container security and Kubernetes environments\nBackground in vulnerability research or exploit development\nContributions to open-source security projects\nExperience working in fast-paced startup environments\nSkills & Attributes\nHacker mindset: Creative, persistent, and always thinking outside the box\n\nTechnical depth: Ability to dive deep into complex systems and understand their security implications\n\nCommunication excellence: Can translate technical findings into business risk for various stakeholders\n\nSelf-directed: Thrives in a startup environment with minimal supervision\n\nContinuous learner: Passionate about staying current with evolving threats and technologies\n\nCollaborative spirit: Works effectively with cross-functional teams including engineers, product managers, and leadership\n\nWhat We Offer\nRemote-first culture: Work from anywhere within the United States\n\nCompetitive compensation:\nBase salary: $200,000\nEquity package with high growth potential\n\nCutting-edge work: Be at the forefront of AI-assisted security testing\n\nGrowth opportunities: Shape the security posture of a rapidly scaling startup\n\nLearning budget: Annual allocation for training, certifications, and conferences\n\nModern tech stack: Access to the latest tools and technologies\n\nImpact: Your work directly influences product security and customer trust\n\nCollaborative environment: Work alongside talented engineers and security professionals\n\nAbout Our Security Philosophy\nOur mission is to make all software effortless secure. We believe the future of security testing lies at the intersection of human expertise and AI capabilities. Our offensive security engineers don't just find vulnerabilities-they help build the next generation of security assessment tools. You'll work in an environment that values both deep technical skills and creative problem-solving, where your insights directly shape how we approach security challenges.\nInitial conversation with one of our founders (30 minutes)\nTechnical assessment including a practical security challenge (1-2 hours, completed on your schedule)\n1 week work trial (paid)","description_format":"text","description_chars":4861,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Growth opportunities"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Application Security","AI Agents"],"lifecycle":[{"event":"open","at":"2026-09-03T00:58:32Z"}],"visa":[],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":1,"p_active":0.531,"p_room":0.55,"age_days":47,"expected_fill_days":41,"reasons":["conf:2","win:tail"],"computed_at":"2026-10-20T05:45:00Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":true},"html_url":"https://alion.io/job/casco-offensive-security-engineer","json_url":"https://alion.io/job/casco-offensive-security-engineer.json","meta":{"generated_at":"2026-10-20T07:59:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8457,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2392},"rest":"https://alion.io/mcp/rest/get_company?id=2392"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcasco-offensive-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcasco-offensive-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcasco-offensive-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/casco-offensive-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcasco-offensive-security-engineer"}]}