Senior Customer Security Engineer – Penetration Testing & Client Engagement Lead – Championing AI‑Powered Security Innovation for Developer‑First Solutions at brighthush

About brighthush and the Future of Developer‑First Security

brighthush is more than a cybersecurity vendor; it is a movement that is redefining how security is woven into the very DNA of software development. Founded in 2022 by a coalition of serial entrepreneurs, seasoned engineers, and security visionaries, brighthush has quickly become a trusted partner for fintech, healthtech, e‑commerce, and a growing list of SaaS startups that demand secure, scalable, and developer‑centric solutions.

Our core philosophy is simple yet revolutionary: security should be baked into the code, not bolted on after the fact. Traditional security tools often become friction points, slowing down engineering teams and stifling innovation. brighthush’s mission is to eliminate that friction by delivering AI‑driven, automated, and context‑aware security solutions that protect real risk without slowing the pace of innovation.

We are on the brink of launching a brand‑new penetration testing product that will disrupt a multi‑billion‑dollar market. As we transition from concept to market, we need a visionary security engineer who can shape the product from the ground up, lead client engagements, and translate real‑world challenges into actionable product improvements.

What We’re Building – The AI‑Driven Penetration Testing Platform

The upcoming platform will combine the rigor of manual testing with the speed of machine learning. By leveraging natural language processing, graph analytics, and reinforcement learning, the tool will automatically surface attack vectors, prioritize findings by business impact, and suggest remediation steps that integrate seamlessly into existing CI/CD pipelines. The platform will also provide a developer‑first interface, allowing teams to run tests from within their IDE or through a lightweight CLI, making security a natural part of the development workflow.

As the Senior Customer Security Engineer, you will be the bridge between this cutting‑edge technology and the real‑world challenges our customers face. Your insights will directly influence the product roadmap, ensuring that the platform not only meets but exceeds the expectations of the most demanding security professionals.

Why This Role Matters

The Senior Customer Security Engineer sits at the intersection of technology, customer experience, and product strategy. Your work will directly influence how developers build, test, and ship secure code, making you a key driver of our mission to make security a natural part of the development lifecycle. You will be the bridge between our cutting‑edge AI‑driven tools and the real‑world challenges our customers face.

Day‑in‑the‑Life of a Senior Customer Security Engineer

• Morning Sync: Quick stand‑up with product, engineering, and sales to review upcoming client engagements and any new feature requests.
• Client Engagement: Conduct pre‑test planning calls, define scope, and set expectations with the client’s security and engineering leads.
• Hands‑On Pentesting: Execute manual and automated tests against web applications, APIs, and infrastructure, leveraging the latest AI‑driven tools.
• Post‑Test Analysis: Translate findings into actionable remediation plans, prioritizing risks based on business impact.
• Feedback Loop: Meet with the AI team to discuss false positives, feature gaps, and opportunities for product improvement.
• Mentorship: Coach junior engineers on advanced exploitation techniques and best practices.
• Wrap‑Up: Draft client‑friendly reports, update internal knowledge bases, and plan next steps.

Key Responsibilities

• End‑to‑End Customer Engagement: Guide clients through every phase of the pentest lifecycle—pre‑test planning, execution, and post‑test remediation—ensuring they extract maximum value and experience seamless, high‑quality engagements.
• Technical Point of Contact: Serve as the primary technical liaison for customers, answering in‑depth questions about test setups, scope definition, results interpretation, and validation of potential false positives.
• Actionable Findings: Translate complex security findings into clear, actionable recommendations. Advise clients on prioritization, remediation strategies, and how to integrate fixes into their existing architecture and development workflows.
• Product Feedback Loop: Collaborate closely with the AI pentesting team to feed real‑world customer insights back into the product. Help refine accuracy, usability, and overall impact of the pentesting solution.
• Knowledge Sharing: Mentor junior engineers and share best practices across the organization, fostering a culture of continuous learning and technical excellence.
• Documentation & Reporting: Produce comprehensive, client‑friendly reports that clearly communicate risks, impact, and remediation paths. Ensure documentation aligns with industry standards and internal quality guidelines.
• Process Improvement: Identify bottlenecks in the engagement workflow and propose automation or tooling enhancements that increase efficiency and reduce manual effort.
• Cross‑Functional Collaboration: Work hand‑in‑hand with product managers, engineering, sales, and support to align customer needs with product roadmap and service delivery.

Essential Qualifications

• Hands‑On Pentesting Experience: Demonstrated experience performing penetration tests on web applications, APIs, and infrastructure. Proven track record of identifying and exploiting vulnerabilities in real‑world environments.
• Customer‑Facing Expertise: Comfortable engaging directly with clients, understanding their business context, and translating technical findings into business‑relevant insights.
• Strong Security Foundations: Deep knowledge of application and infrastructure security principles, OWASP Top 10, NIST frameworks, and common attack vectors.
• Clear, Empathetic Communication: Ability to explain complex security concepts to both technical and non‑technical stakeholders in a concise, approachable manner.
• Certifications (Preferred): OSCP, OSWE, CREST, or equivalent credentials that demonstrate advanced penetration testing skills.

Preferred Qualifications

• Experience with automated pentesting tools and AI‑driven security solutions.
• Background in cloud security and containerized environments.
• Familiarity with DevSecOps pipelines and integration of security testing into CI/CD workflows.
• Previous involvement in product development or feature prioritization based on customer feedback.

Core Skills & Competencies

• Technical Proficiency: Mastery of exploitation techniques, vulnerability assessment, and secure coding practices.
• Analytical Thinking: Ability to dissect complex systems, identify attack surfaces, and assess risk severity.
• Client‑Centric Mindset: Empathy for customer pain points and a passion for delivering solutions that truly add value.
• Collaboration & Influence: Strong teamwork skills and the ability to influence product direction through data‑driven insights.
• Adaptability: Thrive in a fast‑moving, zero‑to‑one environment where priorities evolve rapidly.

Career Growth & Learning Opportunities

At brighthush, we believe in rapid career acceleration. As the first Senior Customer Security Engineer, you will:

• Own a critical product line from inception to market, gaining deep expertise in both technical and business domains.
• Progress quickly into senior leadership roles—such as Lead Security Engineer, Director of Security Services, or Head of Product Security—based on performance and impact.
• Participate in cross‑functional initiatives, including product strategy, engineering, and sales, to shape the future of developer‑first security.
• Access continuous learning resources: industry conferences, advanced training, and internal knowledge‑sharing sessions.
• Benefit from a mentorship program that pairs you with seasoned security veterans and business leaders.
• Earn equity that grows with the company, giving you a direct stake in the success of the solutions you help build.

Work Environment & Company Culture

brighthush is built on a foundation of transparency, collaboration, and a relentless focus on customer success. Our culture is characterized by:

• Open Communication: Regular town halls, feedback loops, and an open‑door policy that encourages ideas from every level.
• Inclusive & Diverse: A commitment to hiring and nurturing talent from all backgrounds, ensuring a vibrant and innovative workplace.
• Flexible Work Arrangements: Remote‑first model with flexible hours to support work‑life balance.
• Innovation‑Driven: A fast‑paced environment where experimentation is encouraged and failure is seen as a learning opportunity.
• Community Engagement: Participation in open‑source projects, security meetups, and industry panels to stay at the forefront of the field.
• Recognition & Celebration: Regular shout‑outs, hackathon prizes, and team‑building retreats that reinforce a sense of belonging.

Compensation & Benefits

While specific figures vary by experience and location, brighthush offers a competitive salary package that includes:

• Base salary aligned with market standards for senior security roles.
• Performance‑based bonuses and equity options that reward long‑term success.
• Comprehensive health, dental, and vision insurance.
• Generous paid time off, parental leave, and wellness programs.
• Professional development stipend and access to industry certifications.
• Team‑building retreats, hackathons, and social events to foster camaraderie.
• Flexible remote work policy with the option to work from any location.
• Access to cutting‑edge security tools and a fully stocked home‑office stipend.

How to Apply

Ready to take the next step in your career? Apply now and help us build the future of secure, developer‑first software. We’re excited to hear from passionate security professionals who thrive in a fast‑moving, customer‑centric environment.