1 day ago
Base Salary
$270k - $330k/yr
Responsibilities
- Conduct continuous penetration testing and red team assessments across applications, APIs, AI/ML pipelines, and cloud environments.
- Build agentic security tooling that discovers, validates, and patches vulnerabilities across code review, dependency management, and infrastructure-as-code.
- Develop offensive tooling, exploit chains, attack simulations, automated security testing, and remediation pipelines.
- Perform adversarial testing of prompt injection, model manipulation, data poisoning, agent workflows, and tenant isolation boundaries.
- Research vulnerabilities and bug bounty findings, including logic flaws, authorization bypasses, and chained exploits.
- Lead threat modeling, purple team exercises, security control validation, and remediation of external penetration test findings.
- Contribute to backend code, fix critical vulnerabilities, harden authentication and authorization, and build security primitives.
- Share offensive security techniques and findings with engineering and leadership.
Requirements
- Professional penetration testing experience across web applications, APIs, cloud environments, and ideally AI/ML systems.
- Professional development experience with a strongly typed language such as Rust, Go, Java, or C++ and scripting languages such as Python or Bash.
- Experience with Burp Suite, Nuclei, Semgrep, custom fuzzing frameworks, and offensive tooling development.
- Experience integrating SCA, SAST, and DAST security checks into CI/CD pipelines.
- Experience with Terraform, Kubernetes, and identifying misconfigurations and attack paths in AWS or GCP.
- Applied knowledge of threat modeling, cryptography fundamentals, and SOC 2, ISO 27001/42001, and NIST CSF frameworks.
- Preferred qualifications include OSCP, OSWE, GXPN, GWAPT, CPTS, or similar certifications; cloud and Kubernetes penetration testing; bug bounty or published CVE experience; regulated multi-tenant SaaS experience; and customer-facing security architecture or penetration-test discussions.
Benefits
- Opportunity to work on AI products for leading financial institutions and own significant security surface area.
- Collaborate with a highly skilled team working at the intersection of AI and finance.
- Work on technically demanding, frontier AI and security problems at a rapidly scaling startup.
Categories
About Rogo
Rogo builds an AI operating system for finance, offering a suite of agents that handle sourcing, diligence, modeling, and turning analysis into deliverables for investment banks, private equity funds, and investment firms. It sells enterprise software and advisory services to large financial institutions. Founded in 2022 and headquartered in New York, the privately held company focuses on Wall Street workflows and is used by global finance teams.