{"id":4045789,"url":"https://alion.io/job/finix-offensive-security-engineer","title":"Offensive Security Engineer","company":{"id":171797,"name":"Finix","domain":"finix.com","url":"https://alion.io/company/finix","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":87,"open_postings":15,"ghost_share":0,"stale_share":0.333,"repost_share":0,"time_to_fill_p50_days":79,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Burp Suite","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Active Directory","optional":true},{"name":"Amazon EKS","optional":true},{"name":"Okta","optional":true}],"status":"live","first_seen_at":"2026-11-10T23:41:15Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T23:52:08Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About the Role:\nThe Engineering organization at Finix owns the delivery and stability of our product end to end. As an Offensive Security Engineer, you will find weaknesses in Finix’s applications, cloud infrastructure, and corporate environment before attackers do, and work with engineers to fix them. You will run our internal penetration testing program and work closely with Engineering, Information Security, Compliance, and IT.\nThis is an in-office position based in our San Francisco office.\nYou Will:\nPlan and run red team tests across our web applications, APIs, AWS infrastructure, Kubernetes, and corporate environment\nPerform PCI DSS penetration testing and segmentation testing for our cardholder data environment as a Level 1 service provider\nTest new features and architecture changes, and partner with Engineering on threat modeling and secure design\nReview source code, especially Java services, for security flaws, and help engineers understand and fix them\nRun purple team exercises with detection and incident response to validate and improve our alerting\nValidate and reproduce bug bounty and third-party pentest findings, and assess their real-world impact\nWrite clear reports with reproducible steps, business impact, and practical remediation guidance, and retest fixes\nBuild tooling and automation to scale offensive testing and catch regressions\nUse frontier AI models to accelerate offensive testing, including building AI-assisted workflows and agents for recon, code review, vulnerability discovery, and exploit validation\nDeploy and operate self-hosted AI models for security testing, so source code, findings, and sensitive data stay inside Finix’s environment\nTest internal AI tooling and LLM integrations for prompt injection, data leakage, and abuse\nYou Have:\n4+ years of hands-on offensive security experience, such as penetration testing, red teaming, or application security testing\nDeep web application and API testing skills\nExperience attacking cloud environments, especially AWS\nProficiency in Python or Go, the ability to read and review Java code, and mastery with tools like Burp Suite\nHands-on experience using frontier AI models in offensive security work, such as AI-assisted code review, fuzzing, or automated testing agents\nStrong ability to explain findings and risk to engineers and non-technical stakeholders\nSound judgment and respect for scope and rules of engagement when testing production-adjacent systems\nNice to Have:\nPublished CVEs, security research, conference talks, or recognition in bug bounty programs\nCTF experience\nKubernetes and container security testing (EKS)\nMobile or Android application testing\nActive Directory, Okta, or identity provider attack techniques\nFamiliarity with payment systems, such as card networks, HSMs, or ISO 8583\nLLM and AI application security testing","description_format":"text","description_chars":2847,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Software","Marketplaces","Operating Systems"],"lifecycle":[{"event":"open","at":"2026-11-10T23:52:08Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":79,"reasons":["conf:1","win:early"],"computed_at":"2026-11-11T01:22:36Z"},"pay":null,"html_url":"https://alion.io/job/finix-offensive-security-engineer","json_url":"https://alion.io/job/finix-offensive-security-engineer.json","meta":{"generated_at":"2026-11-11T01:22:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":676,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":171797},"rest":"https://alion.io/mcp/rest/get_company?id=171797"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffinix-offensive-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffinix-offensive-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffinix-offensive-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/finix-offensive-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffinix-offensive-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4045789}},{"tool":"search_jobs","arguments":{"company":"finix.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4045789},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}