← All roles

Offensive Security Engineer

Casco· Engineering
Apply on company site
Hybrid (US)$200k + equityFull-timePosted 11mo ago

About the role

Casco is seeking an exceptional Offensive Security Engineer to combine traditional penetration testing with AI/LLM security expertise. You’ll perform manual penetration testing across web apps, APIs, cloud, and networks, while evolving automated red-teaming capabilities and security tooling.

Responsibilities

  • Execute comprehensive, white-glove manual penetration tests across web applications, APIs, cloud infrastructure, and network environments
  • Review, validate, and enhance findings generated by our agentic red teaming platform
  • Develop custom exploits, tools, and methodologies to identify complex security vulnerabilities
  • Contribute to the development of security-focused software and tooling within our engineering team
  • Collaborate with our engineering team to improve and refine our automated security testing capabilities
  • Produce detailed, actionable security assessment reports with clear remediation guidance
  • Partner with customer engineering teams to ensure security findings are properly understood and addressed
  • Research emerging attack vectors, particularly those involving AI/LLM systems and applications
  • Drive innovation in offensive security methodologies, especially at the intersection of traditional pentesting and AI-assisted security assessment
  • Mentor team members on advanced penetration testing techniques
  • Contribute to the company's security strategy and roadmap
  • Participate in the continuous improvement of our security testing frameworks and processes

Qualifications

  • 3+ years of professional penetration testing or offensive security experience with a proven track record of identifying critical vulnerabilities
  • Hands-on experience with AI/LLM security, including prompt injection, model manipulation, data poisoning, or other AI-specific attack vectors
  • Strong software engineering skills with proficiency in at least two programming languages, including TypeScript
  • Deep understanding of OWASP Top 10, MITRE ATT&CK framework, and modern attack methodologies
  • Experience with common penetration testing tools (Burp Suite, Metasploit, Cobalt Strike, custom tooling)
  • Expertise in at least two of the following domains: Web application security, Cloud security (AWS, Azure, GCP), Network penetration testing, API security testing

Skills

Required:Penetration testingAI/LLM securityProgramming (TypeScript)OWASP Top 10

Benefits

  • Remote-first culture: Work from anywhere within the United States
  • Base salary: $200,000
  • Equity package with high growth potential
  • Cutting-edge work at AI-assisted security testing
  • Growth opportunities shaping security posture of a scaling startup
  • Learning budget for training, certifications, and conferences
  • Modern tech stack access
  • Impact on product security and customer trust
  • Collaborative environment with talented engineers and security professionals
Last updated Aug 26, 2026. Interested? Apply on the company site.
Casco logo

About Casco

Autonomous security testing for AI systems

Casco helps companies confidently ship AI agents and apps by simulating attacks on their AI systems, identifying vulnerabilities, and providing guided remediation. Companies building on AI face a disproportionate amount of cybersecurity threats. 73% of enterprises experienced at least one AI-related security incident in the past 12 months, with the average incident cost amounting to $4.8m. It also takes 40% longer for these companies to identify and address these breaches vs. non-AI related incidents. Check if your AI system is secure at casco.com --- We already secure AI systems deployed in 60% of Fortune 500 companies and are default alive. [1] [1] http://www.paulgraham.com/aord.html

Company profileWebsite

More open roles at Casco