Senior Engineer, Offensive Security

🕒 4 dias atrás

🏛️ District of Columbia, Florida, +3 estados a mais – Remoto

🏛️ District of Columbia – Remote 🐊 Florida – Remote 🐎 Kentucky – Remote 🌲 North Carolina – Remote 🤠 Texas – Remote

💵 $117.600 - $161.700 / ano

⏰ Tempo Integral

🟠 Sênior

🧑‍💻 Engenheiro Full-stack

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Humana

SiteLinkedInTodas as Vagas

10.000+ funcionários

Fundada em 1961

🏥 Saúde

🛡️ Seguros

⚕️ Seguro de Saúde

Healthcare • Insurance • Healthcare Insurance

A Humana é uma empresa de saúde dedicada a gerar um impacto positivo na saúde de indivíduos, comunidades e do sistema de saúde como um todo. Com foco em colocar a saúde em primeiro lugar, a Humana atende a uma ampla e diversa gama de populações, incluindo idosos e militares, oferecendo planos Medicare Advantage (HMO, PPO e PFFS). A Humana está comprometida em promover uma cultura de pertencimento e respeito mútuo, oferecendo benefícios competitivos e flexíveis para garantir a segurança financeira de seus funcionários e de suas famílias. A empresa se orgulha de criar um ambiente de trabalho inclusivo, no qual todos têm a oportunidade de ter sucesso.

Descrição

• Build production-quality AI agents and offensive security tooling, including LLM-driven planning loops, multi-agent orchestration, and tool/function-calling • Contribute to the in-house agent platform powering penetration testing and red-team operations • Operate the tooling as a production, event-driven cloud platform with serverless functions, change-stream pipelines, alarms, and integrated LLM inference • Run network, web-application, cloud, and infrastructure penetration tests from reconnaissance through exploitation, privilege escalation, and lateral movement • Run purple-team exercises validating EDR/XDR, NDR, DLP, and firewall countermeasures • Partner with detection engineering to close gaps identified through offensive testing • Conduct objective-driven red-team operations and adversarial assessments of internal LLM products, agents, RAG pipelines, and ML applications • Test prompt injection, jailbreaks, model extraction and inversion, membership inference, poisoning, evasion, and agent tool/sandbox abuse • Deliver penetration tests and purple-team exercises during the first 90 days and ship improvements to agentic tooling • Ship AI-driven tools adopted into live workflows, run an end-to-end red-team operation, and establish repeatable adversarial testing and evaluation approaches • Embed with service lines and the AI & Tooling Lead while influencing technical direction • Deliver findings and tooling with reproduction steps, severity, business impact, and remediation • Track risk in the enterprise risk platform and follow acceptable-use-of-AI policies and rules of engagement

🎯 Requisitos

• 4+ years of offensive operations experience in red team, penetration testing, purple team/control validation, or bug bounty roles • Track record delivering engagements end to end, including scoping, execution, and clear written findings • Production Python engineering experience building and operating real tooling • Hands-on experience designing, building, or operating AI agents or LLM applications • Experience with agentic workflows, tool/function-calling, and orchestration • Hands-on testing of AI/ML systems, including prompt injection, jailbreaking, and adversarial techniques • Production experience with at least one major cloud service provider: AWS, GCP, or Azure • Ability to work with considerable autonomy on moderately complex engagements • Ability to produce reproducible software with evaluation, safety guardrails, and human-in-the-loop controls where required • Ability to deliver findings with reproduction steps, severity, business impact, and remediation • Ability to track risk in an enterprise risk platform and follow AI acceptable-use policies and offensive security rules of engagement • Selected candidate must reside within approximately 60 minutes driving distance of an eligible location • Home internet must provide at least 25 Mbps download and 10 Mbps upload • Must work from a dedicated space without ongoing interruptions to protect PHI/HIPAA information • Preferred: autonomous offensive agents, C2 frameworks, evasion/OPSEC, EDR/XDR, MITRE ATT&CK, VECTR, Atomic Red Team, PyRIT, Garak, MITRE ATLAS, OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework, MCP, RAG pipelines, cloud penetration testing, threat intelligence, advanced offensive specialties, research/open-source/talk experience, and relevant certifications

🏖️ Benefícios

• Bonus incentive plan • Fridays dedicated to R&D • Hack The Box Pro Labs • All HTB role-based paths and certifications • Discretionary certification funding • Conference/training budgets • Medical benefits • Dental benefits • Vision benefits • 401(k) retirement savings plan • Paid time off • Company holidays • Personal holidays • Paid parental leave • Paid caregiver leave • Short-term disability • Long-term disability • Life insurance • Other whole-person wellness and healthcare benefits