Independently plan and execute internal penetration tests across applications, APIs, cloud infrastructure, and corporate systems; prioritize assessments by risk and business impact.

Define testing scope and rules of engagement with system owners, assess production risk, and choose safe methods for validating vulnerabilities.

Combine hands-on testing with source-code review and architectural analysis to find vulnerabilities and demonstrate realistic attack paths.

Partner with engineering teams to explain findings, agree on practical fixes, track remediation, and retest to confirm the risk is resolved.

Maintain knowledge of Liftoff’s systems and attack surface, revisit high-risk attack paths as systems change, and turn confirmed findings into repeatable tests.

Build testing tools and workflows that combine hands-on assessments with ongoing automated testing and remediation validation.

Make security testing self-service where practical through reusable tests, documented assessment and retesting workflows, and clear remediation guidance.

Support the annual third-party penetration test for independent validation and customer and audit requirements; coordinate scope and follow findings through remediation.

Lead adoption of AI-assisted offensive security tooling: evaluate platforms and build workflows for code analysis, test generation, and finding triage; measure coverage, accuracy, and effort saved.

Partner with Detection & Response to turn validated attack paths and offensive findings into detection improvements and incident-response exercises.

Work across application, cloud, and infrastructure security as priorities change, including Accelerate and MX, and share the team’s on-call and incident-response rotation, including occasional off-hours response and post-incident follow-up.

Senior Security Engineer, Offensive Security

Responsibilities

Qualification

Required

Benefits

Company

Liftoff

More roles at Liftoff