Remote Jobs RockRemote Jobs Rock

Offensive Security Engineer, AI

๐Ÿ•’ 3 days ago
Application SecurityPenetration TestingOffensive SecurityLLMs And Frontier Models
Apply Now

๐Ÿ“œ Description

  • Build, deploy, and maintain AI-powered security scanners to find vulnerabilities across products.
  • Red-team internal AI systems through jailbreak, prompt injection, and tool-abuse testing.
  • Automate vulnerability triage, validation, and remediation workflows.
  • Work with engineering teams to prioritize, remediate, and verify critical vulnerability fixes.
  • Mentor junior security engineers on applying AI to offensive security.

๐Ÿ› ๏ธ Requirements

  • 3+ years of experience in application security, penetration testing, or offensive security with demonstrated ability to build custom security tooling.
  • Hands-on experience using LLMs or frontier models to automate security tasks, scale vulnerability research, or build security scanners.
  • Demonstrated experience red teaming AI-based systems (prompt injection, jailbreak testing, tool abuse).
  • Deep understanding of common vulnerability classes (OWASP Top 10, SANS Top 25) and proven track record identifying and exploiting them in production environments.
  • Proficiency in at least one programming language (Python, Go, or similar) with experience writing production-grade security tooling.
  • Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
  • Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
  • US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
  • Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.

โœจ Benefits

  • Extended health care
  • Dental care
  • Vision care
  • Virtual health care
  • Life and accident insurance
  • Disability coverage
  • Employee stock purchase plan
  • Wellness stipend
Full job description

Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, itโ€™s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called โ€œsurges.โ€ learn more about working at Coinbase.

As an Offensive Security Engineer on the Application Security team within Security, you'll pioneer how Coinbase uses frontier AI models to scale vulnerability discovery, red team AI systems, and automate security workflows. This role bridges traditional penetration testing with next-generation AI-augmented offensive security, directly accelerating our ability to protect products and customers. You'll own the development of AI-driven security tooling and collaborate across Vulnerability Management, Offensive Security, and Incident Response to fundamentally shift how we operate.

What you'll do:

  • Build, deploy, and maintain custom security scanners that leverage frontier models to detect vulnerabilities at scale across Coinbase's product surface.
  • Lead red teaming efforts against internal AI systems, including jailbreak testing, prompt injection analysis, and tool abuse simulation.
  • Develop AI-driven automation for vulnerability triage, validation, and remediation workflows to accelerate the bug bounty and vulnerability response pipelines.
  • Partner with engineering teams to prioritize, remediate, and verify fixes for critical vulnerabilities discovered through AI-augmented and manual testing.
  • Mentor junior security engineers on integrating AI into offensive security workflows to scale team capabilities.

Required Skills and Experience:

  • 3+ years of experience in application security, penetration testing, or offensive security with demonstrated ability to build custom security tooling.
  • Hands-on experience using LLMs or frontier models to automate security tasks, scale vulnerability research, or build security scanners.
  • Demonstrated experience red teaming AI-based systems (prompt injection, jailbreak testing, tool abuse).
  • Deep understanding of common vulnerability classes (OWASP Top 10, SANS Top 25) and proven track record identifying and exploiting them in production environments.
  • Proficiency in at least one programming language (Python, Go, or similar) with experience writing production-grade security tooling.
  • Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Pay Transparency Notice: The target annual base salary for this position can range as detailed below. Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision).

Annual base salary range (excluding equity and bonus):
$154,000-$154,000 CAD
  • Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
  • Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
  • US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
  • Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
  • Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.
Bugcrowd

Application Security Engineer II (Contract - 5 months )

๐Ÿ•’ 4 days ago
Bugcrowd๐Ÿ‘ฅ 1001 - 5000 employees๐Ÿข Computer & Network Security

Triage and validate vulnerability submissions across managed bug bounty programs, assess their accuracy and severity, communicate with clients and researchers, and escalate critical findings.

Application SecurityVulnerability TriageVulnerability ValidationOWASP Top Ten
Kodex

Security Engineer

๐Ÿ•’ 7 days ago
Kodex๐Ÿ‘ฅ 51 - 200 employees๐Ÿข Internet

Own and expand the security program across corporate security, SecOps, compliance, identity, and access, while leading incident response, security tooling, and the SOC 2 audit cycle.

Security EngineeringCorporate SecuritySecurity OperationsCloud Security
Latent

Security Engineer

๐Ÿ•’ 13 days ago
Latent๐Ÿข Healthcare Technology๐Ÿค B2B

Own and advance security across cloud, AI, data, applications, IT, and incident response, building secure-by-default systems and automations that help employees move quickly while protecting patient data.

Cloud SecurityAI SecurityData SecurityApplication Security
Shopware

Security Engineer (m/w/d)

๐Ÿ•’ 14 days ago
Shopware๐Ÿ‘ฅ 201 - 500 employees๐Ÿข Computer Software

As a Security Engineer, you will enhance the security of Shopware products by identifying and mitigating security risks throughout the product development lifecycle.

Software DevelopmentApplication SecurityVulnerability AssessmentThreat Modeling
Very Good Security

Application Security Engineer

๐Ÿ•’ 14 days ago
Very Good Security๐Ÿ‘ฅ 51 - 200 employees๐Ÿข Financial Services

As an Application Security Engineer, you will enhance security practices by integrating proactive tools, managing a bug bounty program, and fostering a culture of security within the engineering team.

Application SecuritySecure SDLCCI/CDJava

Trusted by Remote Workers