Offensive Security Engineer
Core
Senior-level Offensive Security Engineer acting as an adversary-in-residence to lead whitebox penetration testing, simulate adversarial attacks, and secure AI-enabled systems for Replit's cloud-native platform.
Role type
Senior IC Offensive Security Engineer (Adversary-in-Residence)
Builds
Internal security frameworks and AI-assisted testing tools
Domain
Cloud-native security, AI/LLM security, Web application security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Whitebox penetration testing, manual code-level inspection, cloud-native architecture (K8s, Docker), Go/Python/TypeScript, adversarial mindset, vulnerability chaining
Preferred skills
Public bug bounty recognition, AI-based security tooling development, incident response, CVE publication
Technologies
Kubernetes, Docker, Go, Python, TypeScript, LLMs, HackerOne
Responsibilities
Lead whitebox penetration testing with full source code access, simulate Red/Purple team engagements across cloud-native stack, perform offensive testing on LLM-backed applications, identify and chain vulnerabilities, build offensive tooling, partner with engineering to explain root causes
Seniority
Senior, hands-on IC