AI Security Lead – Offensive

🔥 4 minutes ago

🇪🇸 Spain – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Plain Concepts

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2006

💼 Consulting

📣 Marketing

📦 Logistics

Consulting • Marketing • Logistics

Plain Concepts is an innovative technology company committed to delivering customized solutions across a wide array of digital needs. With a focus on cutting-edge areas like Artificial Intelligence, cybersecurity, cloud computing, and Internet of Things (IoT), Plain Concepts is a partner for companies looking to enhance operations and secure their digital landscapes. As a recognized Microsoft AI Partner, Plain Concepts aims to transform data into insightful information and improve business applications through bespoke IoT developments. Additionally, the company fosters revolutionary advancements in augmented and virtual reality, while driving digital transformation initiatives with Microsoft 365 and a strong focus on sustainability and social commitment.

📋 Description

• Lead AI-powered penetration testing initiatives, combining traditional offensive security techniques with AI-assisted capabilities • Design and evolve offensive security services, methodologies, assessment frameworks, and delivery models • Assess web applications, APIs, cloud environments, and AI-enabled systems to identify vulnerabilities and security risks • Evaluate the security of LLM-based applications and AI agents, including prompt injection, data leakage, excessive permissions, and insecure tool execution • Help organizations transform their pentesting programs by increasing assessment capacity and reducing delivery times without compromising quality • Drive Secure SDLC and DevSecOps initiatives, integrating security controls into engineering workflows and CI/CD pipelines • Build automation, tooling, and prototypes that improve efficiency and can be reused across multiple engagements • Act as a trusted advisor for CISOs, architects, engineering teams, and security leaders • Mentor and develop a multidisciplinary team of offensive security, application security, and DevSecOps specialists

🎯 Requirements

• 7+ years of experience in Offensive Security, Application Security, Adversarial Testing, or Penetration Testing • Experience leading technical teams or complex security engagements • Strong hands-on experience with web application and API security assessments • Solid understanding of authentication, authorization, business logic vulnerabilities, and exploit validation • Experience implementing or improving Secure SDLC practices, including threat modeling, secure code reviews, vulnerability management, and remediation workflows • Hands-on experience using LLMs, AI agents, or AI-powered security tools to enhance testing and automation activities • Experience integrating security into CI/CD pipelines and modern cloud environments • Knowledge of application security tooling, including SAST, DAST, Software Composition Analysis, and Secrets Scanning • Strong programming or scripting skills, preferably with Python or PowerShell • Experience with offensive security tools such as Burp Suite, Nmap, or similar technologies • Understanding of AI application security risks, including prompt injection, data leakage, retrieval access controls, and unsafe tool execution • Excellent communication skills, with the ability to explain technical findings to both technical and non-technical audiences • Fluent Spanish and English • OSCP, OSWE, CRTO, or GIAC certifications are nice to have • Experience building security methodologies, frameworks, or internal security services is nice to have • Background in consulting or client-facing security engagements is nice to have • Experience leading security transformation initiatives is nice to have • Knowledge of Azure and GitHub security ecosystems is nice to have

🏖️ Benefits

• Flexible schedule 35 Hours / Week • Fully remote work (optional) • Flexible compensation (restaurant, transport, and childcare) • Fully free health insurance, with a co-payment for dental services • Individual budget for training or equipment and free Microsoft certifications • English lessons • Birthday day off • Monthly bonus for electricity and Internet expenses at home • Discount on gym plan and sports activities • Plain Camp (annual team-building event) • Extra perks: events attendance and speakers, welcome pack, baby basket, Christmas basket, discount portal for employees • Selection process: phone screen and 2 interviews with the team