Senior Security Engineer, Offensive Security
Liftoff · United States (Remote)
About this role
## Liftoff — Senior Security Engineer, Offensive Security ### About Liftoff Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize revenue across programmatic and direct demand. Liftoff’s solutions—including **Accelerate, Direct, Monetize, Intelligence, and Vungle Exchange**—support over **6,600 mobile businesses** across **74 countries** in sectors such as gaming, social, finance, ecommerce, and entertainment. Founded in 2012 and headquartered in Redwood City, CA, Liftoff has a diverse, global presence. ### About the Liftoff Security Team The Liftoff Security team protects Liftoff’s customers, users, and employees. You’ll architect Liftoff’s security posture, build tools and systems that defend it, and partner with engineering teams as they ship new products and features. This role is **software-engineering-driven security** across the entire stack—**infrastructure, web, mobile, and IT**—with an emphasis on **automation** and **well-designed tools**. As a **Senior Security Engineer, Offensive Security**, you will: - Own internal offensive testing - Lead the move from **point-in-time penetration tests** to **continuous, AI-assisted testing** - Plan assessments independently, validate vulnerabilities safely, and work with engineering teams through remediation and retesting - Build sustained knowledge of Liftoff’s source code and systems - Contribute across **application, cloud, and infrastructure security** - Support **on-call** and **incident-response** work ### Responsibilities - Independently plan and execute internal penetration tests across **applications, APIs, cloud infrastructure, and corporate systems**, prioritizing by **risk** and **business impact** - Define testing scope and **rules of engagement** with system owners; assess production risk and choose safe validation methods - Combine hands-on testing with **source-code review** and **architectural analysis** to find vulnerabilities and demonstrate realistic attack paths - Partner with engineering teams to explain findings, agree on practical fixes, track remediation, and **retest** to confirm risk is resolved - Maintain knowledge of Liftoff systems and attack surface; revisit high-risk attack paths as systems change; turn findings into repeatable tests - Build testing tools and workflows that combine hands-on assessments with ongoing automated testing and remediation validation - Make security testing **self-service** where practical via reusable tests, documented assessment/retesting workflows, and clear remediation guidance - Support the annual **third-party penetration test** for independent validation and customer/audit requirements; coordinate scope and follow findings through remediation - Lead adoption of **AI-assisted offensive security tooling**: evaluate platforms, build workflows for code analysis/test generation/finding triage, and measure coverage/accuracy/effort saved - Partner with **Detection & Response** to turn validated attack paths and offensive findings into detection improvements and incident-response exercises - Work across application, cloud, and infrastructure security as priorities change (including **Accelerate** and **MX**), and participate in the team’s on-call/incident-response rotation (including occasional off-hours response and post-incident follow-up) ### Minimum Qualificat
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.