{"id":3768335,"url":"https://alion.io/job/trace3-sr-architect-offensive-security-ai-testing-cloud-testing-remote","title":"Sr. Architect | Offensive Security/ AI Testing/ Cloud Testing (Remote)","company":{"id":1703,"name":"Trace3","domain":"trace3.com","url":"https://alion.io/company/trace3","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":82,"open_postings":11,"ghost_share":0,"stale_share":0.727,"repost_share":0,"time_to_fill_p50_days":40,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Nashville, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":170000,"max":220000,"currency":"USD","period":"year","gross":null,"usd_annual":220000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Active Directory","optional":true},{"name":"AI Agents","optional":true},{"name":"AWS","optional":true},{"name":"AWS Bedrock","optional":true},{"name":"Azure AKS","optional":true},{"name":"Azure DevOps","optional":true},{"name":"BloodHound","optional":true},{"name":"Burp Suite","optional":true},{"name":"Embeddings","optional":true},{"name":"Frida","optional":true},{"name":"GCP","optional":true},{"name":"GitHub Actions","optional":true},{"name":"Kubernetes","optional":true},{"name":"Metasploit","optional":true},{"name":"MobSF","optional":true},{"name":"Model Context Protocol","optional":true},{"name":"Multi-Agent Systems","optional":true},{"name":"Objection","optional":true},{"name":"OpenAI","optional":true},{"name":"OWASP","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"PowerShell","optional":true},{"name":"Promptfoo","optional":true},{"name":"Prowler","optional":true},{"name":"Python","optional":true},{"name":"RAG","optional":true},{"name":"Red Teaming","optional":true},{"name":"ScoutSuite","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-04T19:43:07Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-07T09:30:30Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Who is Trace3?\nTrace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.\nOur culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!\nTrace3 is headquartered in Irvine, California. We employ more than 1,200 people all over the United States. Our major field office locations include Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Francisco. \nReady to discover the possibilities that live in technology?\nCome Join Us!\nStreet-Smart - Thriving in Dynamic Times\nWe are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.\nJuice - The “Stuff” it takes to be a Needle Mover \nWe get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.\nTeamwork - Humble, Hungry and Smart\nWe are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures - not just their success. We appreciate the individuality of the people around us.\nJOB SUMMARY:\nThe Senior Architect, Offensive Security is a senior technical contributor who leads advanced offensive security engagements for Trace3 clients, with a primary focus on cloud security testing (particularly Microsoft Azure, Entra ID, and Microsoft 365) and AI/LLM security testing. This role uncovers vulnerabilities and realistic attack paths in modern cloud and AI-enabled environments through adversary-minded, manual testing that goes well beyond automated scanning, and delivers clear, actionable remediation guidance.\n\nThe Sr. Architect will plan, execute, and report on complex assessments, serve as a technical escalation point for the team, and help build the testing methodologies behind the practice’s cloud and AI service offerings. Mobile application testing experience is a plus. While general internal network, external network and web application penetration testing experience is valued and may be utilized, this role is focused on specialized testing. A key function of this role will be building deep relationships, gaining trust, and enabling client success.\n\nSUMMARY OF ESSENTIAL JOB FUNCTIONS:\nLead and execute cloud security assessments and penetration tests, primarily in Microsoft Azure, Entra ID, and Microsoft 365 (and AWS or GCP as applicable), covering identity and privilege escalation, tenant and subscription attack paths, managed identities, Key Vault, storage, serverless, and container (AKS) workloads\nIdentify and exploit cloud identity weaknesses, including conditional access gaps, OAuth application and consent abuse, token theft and replay, and hybrid identity attack paths between on-premises Active Directory and Entra ID\nAssess cloud DevOps and infrastructure-as-code environments (e.g., Azure DevOps, GitHub Actions, Terraform) for pipeline compromise, secrets exposure, and privilege escalation paths\nPerform security assessments of AI/ML and LLM-enabled applications and agentic systems, including prompt injection, jailbreaking, sensitive data leakage, insecure output handling, excessive agency, RAG pipeline weaknesses, and model supply-chain risk, aligned to the OWASP Top 10 for LLM Applications and MITRE ATLAS\nAssess the cloud platforms and infrastructure that host AI workloads (e.g., Azure OpenAI, Azure AI Foundry, AWS Bedrock), including access controls, data exposure, network isolation, and integrations with enterprise data sources\nServe as technical lead on engagements: define the testing approach and rules of engagement, coordinate with client stakeholders, and direct and support other testers\nProduce high-quality reports that clearly communicate attack narratives, risk ratings, evidence, and prioritized remediation guidance, and present findings to audiences ranging from engineers to executives\nDevelop and maintain testing methodologies, playbooks, and checklists for cloud and AI security testing\nDevelop scripts, tools, and automation to streamline testing and internal processes\nResearch emerging attack techniques in cloud and AI security, and share findings through internal enablement, blog posts, and conference presentations that build Trace3’s presence in the security community\nMentor junior and mid-level team members and provide technical quality review of their work\nAssist in the design and maintenance of internal lab infrastructure for offensive security research, development, and testing\nREQUIRED SKILLS AND EXPERIENCE:\nBachelor’s degree in Computer Science, Information Technology, or a related technical field, or equivalent professional experience\n8+ years of hands-on offensive security experience, including:Deep expertise in cloud penetration testing, preferably Azure, Entra ID, and Microsoft 365 (e.g., ROADtools, AzureHound, MicroBurst, GraphRunner, Prowler, ScoutSuite)\nHands-on experience testing AI/LLM applications and agentic systems (e.g., PyRIT, garak, promptfoo, Burp Suite)\n\nStrong understanding of cloud identity and access management, including OAuth 2.0, OpenID Connect, SAML, conditional access, and token-based authentication\nWorking knowledge of how LLM applications are built and deployed, including RAG architectures, embeddings and vector stores, tool-calling, and model hosting platforms\nProficiency in scripting and development using languages such as Python, PowerShell, Go, or Bash\nSolid foundation in traditional penetration testing (network, Active Directory, and web applications) and common tooling such as Burp Suite, BloodHound, and Metasploit\nExcellent written communication skills with the ability to produce clear, client-ready reports\nExcellent oral communication and presentation skills, with the ability to present findings to C-level executives and non-technical audiences\nHighly organized, detail-oriented, excellent time management skills, and able to effectively prioritize tasks in a fast-paced, high-volume, and evolving work environment\nAbility to approach client requests in a proactive and consultative manner; listen, understand client needs, and effectively deliver\nComfortable managing multiple and changing priorities, and meeting deadlines in an entrepreneurial environment\nMotivated self-starter who loves to solve challenging problems and feels comfortable working directly with clients\nAbility to travel when needed\nPREFERRED SKILLS AND EXPERIENCE:\nCloud-focused certifications such as CARTP, CARTE, GCPN, or AZ-500\nOffensive security certifications such as OSCP, OSEP, OSWE, OSAI, HTB COAE or GXPN\nHands-on experience with AWS and/or GCP security testing in addition to Azure\nExperience testing agentic AI systems, including Model Context Protocol (MCP) integrations and multi-agent workflows\nMobile application penetration testing experience for iOS and Android (e.g., Frida, Objection, MobSF, jadx), aligned to OWASP MASVS and MASTG\nMobile-focused certifications such as GMOB or eMAPT\nPublished security research, CVEs, conference talks, or contributions to open-source offensive tooling\nExperience with red team operations or adversary emulation\nActual salary will be based on a variety of factors, including location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base salary.\nEstimated Pay Range\n$170,000—$220,000 USD\nThe Perks\nComprehensive medical, dental and vision plans for you and your dependents\n401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability\nCompetitive Compensation\nTraining and development programs\nMajor offices stocked with snacks and beverages\nCollaborative and cool culture\nWork-life balance and generous paid time off\nOur Commitment\nAt the core of Trace3's DNA is our people. We are a diverse group of talented individuals who understand the importance of teamwork and demonstrating leadership, character, and passion in all that we do.\nWe’re committed to fostering an inclusive workplace where everyone feels respected, valued, and empowered to grow. We recognize that embracing diversity drives innovation, improves outcomes, fosters collaboration, boosts teammate satisfaction, and builds a more inclusive culture.\nAs an equal opportunity employer, Trace3 bases all employment decisions based on individual qualifications, merit, and business requirements. We do not engage in discrimination on the basis of race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability, genetic information, or any other characteristic protected by federal, state, or local law.\nAny demographic information provided is strictly voluntary, kept confidential in accordance with Equal Employment Opportunity (EEO) regulations, and will not be used in employment decisions, including hiring, promotions, or mentorship programs. We are committed to providing equal employment opportunities for all.\nIf you require a reasonable accommodation to complete the application process or participate in an interview, please email .\n***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.","description_format":"text","description_chars":10487,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","IT Consulting & Digital Transformation","AI Consulting & Integration","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-11-04T20:48:48Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":40,"reasons":["conf:0","stale_co","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":220000,"is_top_pay":true},"html_url":"https://alion.io/job/trace3-sr-architect-offensive-security-ai-testing-cloud-testing-remote","json_url":"https://alion.io/job/trace3-sr-architect-offensive-security-ai-testing-cloud-testing-remote.json","meta":{"generated_at":"2026-11-07T13:06:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15377,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1703},"rest":"https://alion.io/mcp/rest/get_company?id=1703"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftrace3-sr-architect-offensive-security-ai-testing-cloud-testing-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftrace3-sr-architect-offensive-security-ai-testing-cloud-testing-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftrace3-sr-architect-offensive-security-ai-testing-cloud-testing-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/trace3-sr-architect-offensive-security-ai-testing-cloud-testing-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftrace3-sr-architect-offensive-security-ai-testing-cloud-testing-remote"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3768335}},{"tool":"search_jobs","arguments":{"company":"trace3.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3768335},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}