Senior Engineer, Offensive Security

🔥 0 minutes ago

🏛️ District of Columbia, Florida, +3 more states – Remote

🏛️ District of Columbia – Remote 🐊 Florida – Remote 🐎 Kentucky – Remote 🌲 North Carolina – Remote 🤠 Texas – Remote

💵 $117.6k - $161.7k / year

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Humana

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1961

🏥 Healthcare

🛡️ Insurance

⚕️ Healthcare Insurance

Healthcare • Insurance • Healthcare Insurance

Humana is a healthcare company dedicated to making a positive impact on the health of individuals, communities, and the healthcare system as a whole. With a focus on putting health first, Humana serves a diverse range of populations, including seniors and the military, providing Medicare Advantage HMO, PPO, and PFFS plans. Humana is committed to fostering a culture of belonging and mutual respect, offering competitive and flexible benefits to ensure the financial security of its employees and their families. The company prides itself on creating an inclusive workplace where everyone has the opportunity to succeed.

📋 Description

• Build production-quality AI agents and offensive security tooling, including LLM-driven planning loops, multi-agent orchestration, and tool/function-calling • Contribute to the in-house agent platform powering penetration testing and red-team operations • Operate the tooling as a production, event-driven cloud platform with serverless functions, change-stream pipelines, alarms, and integrated LLM inference • Run network, web-application, cloud, and infrastructure penetration tests from reconnaissance through exploitation, privilege escalation, and lateral movement • Run purple-team exercises validating EDR/XDR, NDR, DLP, and firewall countermeasures • Partner with detection engineering to close gaps identified through offensive testing • Conduct objective-driven red-team operations and adversarial assessments of internal LLM products, agents, RAG pipelines, and ML applications • Test prompt injection, jailbreaks, model extraction and inversion, membership inference, poisoning, evasion, and agent tool/sandbox abuse • Deliver penetration tests and purple-team exercises during the first 90 days and ship improvements to agentic tooling • Ship AI-driven tools adopted into live workflows, run an end-to-end red-team operation, and establish repeatable adversarial testing and evaluation approaches • Embed with service lines and the AI & Tooling Lead while influencing technical direction • Deliver findings and tooling with reproduction steps, severity, business impact, and remediation • Track risk in the enterprise risk platform and follow acceptable-use-of-AI policies and rules of engagement

🎯 Requirements

• 4+ years of offensive operations experience in red team, penetration testing, purple team/control validation, or bug bounty roles • Track record delivering engagements end to end, including scoping, execution, and clear written findings • Production Python engineering experience building and operating real tooling • Hands-on experience designing, building, or operating AI agents or LLM applications • Experience with agentic workflows, tool/function-calling, and orchestration • Hands-on testing of AI/ML systems, including prompt injection, jailbreaking, and adversarial techniques • Production experience with at least one major cloud service provider: AWS, GCP, or Azure • Ability to work with considerable autonomy on moderately complex engagements • Ability to produce reproducible software with evaluation, safety guardrails, and human-in-the-loop controls where required • Ability to deliver findings with reproduction steps, severity, business impact, and remediation • Ability to track risk in an enterprise risk platform and follow AI acceptable-use policies and offensive security rules of engagement • Selected candidate must reside within approximately 60 minutes driving distance of an eligible location • Home internet must provide at least 25 Mbps download and 10 Mbps upload • Must work from a dedicated space without ongoing interruptions to protect PHI/HIPAA information • Preferred: autonomous offensive agents, C2 frameworks, evasion/OPSEC, EDR/XDR, MITRE ATT&CK, VECTR, Atomic Red Team, PyRIT, Garak, MITRE ATLAS, OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework, MCP, RAG pipelines, cloud penetration testing, threat intelligence, advanced offensive specialties, research/open-source/talk experience, and relevant certifications

🏖️ Benefits

• Bonus incentive plan • Fridays dedicated to R&D • Hack The Box Pro Labs • All HTB role-based paths and certifications • Discretionary certification funding • Conference/training budgets • Medical benefits • Dental benefits • Vision benefits • 401(k) retirement savings plan • Paid time off • Company holidays • Personal holidays • Paid parental leave • Paid caregiver leave • Short-term disability • Long-term disability • Life insurance • Other whole-person wellness and healthcare benefits