Remote Position
[Remote] Senior Offensive Security Research Engineer
🌍 Remote · United States
💼 Full-time
Note: The job is a remote job and is open to candidates in USA. Damco Solutions is seeking a Senior Offensive Security Research Engineer to identify, validate, and document vulnerabilities across applications, infrastructure, and AI-powered systems. The role combines offensive security research, penetration testing, red teaming, and Python-based security automation.
Responsibilities
- Conduct advanced offensive security assessments across web, API, cloud, and infrastructure environments
- Perform manual penetration testing and adversary emulation exercises
- Research, identify, validate, and document security vulnerabilities
- Develop Python-based tools and automation for security testing
- Perform LLM and Agentic AI security assessments, including prompt injection, jailbreak, privilege escalation, tool abuse, and data leakage testing
- Execute red team activities against traditional and AI-enabled systems
- Create reproducible proof-of-concepts and clear technical reports
- Collaborate with engineering teams to validate remediation efforts
- Contribute to security research, vulnerability disclosure, and innovation initiatives
Skills
- 5+ years of offensive security experience
- 3+ years of application and infrastructure penetration testing
- Strong Python scripting and automation expertise
- Hands-on experience with:
- Burp Suite
- Nmap
- Metasploit
- Nuclei
- FFUF
- HTTPX
- SQLMap
- Docker
- Linux/Kali
- Strong understanding of:
- OWASP Top 10
- API Security
- Authentication & Authorization
- Network Security
- Cloud Security
- Experience with red team operations and adversary simulation
- Experience securing or testing LLM-based applications
- Agentic AI development experience
- AI Red Teaming experience
- Bug bounty achievements
- CVEs or security research publications
- OSCP, OSWE, OSEP, CRTO, GPEN or similar certifications
- Experience with AWS, Azure, or GCP security testing
- Published security research
- Open-source security tool contributions
- Conference presentations or vulnerability disclosures
Company Overview
Company H1B Sponsorship