1 day ago
Base Salary
$170k - $220k/yr
Responsibilities
- Lead cloud security assessments and penetration tests across Azure, Entra ID, Microsoft 365, AWS, and GCP environments.
- Test cloud identity, privilege escalation, conditional access, OAuth applications, token security, hybrid identity, managed identities, Key Vault, storage, serverless, and AKS workloads.
- Assess Azure DevOps, GitHub Actions, and Terraform environments for pipeline compromise, secrets exposure, and privilege escalation.
- Perform security assessments of AI/ML and LLM applications, agentic systems, RAG pipelines, model integrations, and AI cloud infrastructure.
- Define engagement approaches and rules of engagement, coordinate with client stakeholders, and direct other testers.
- Produce client-ready reports with attack narratives, risk ratings, evidence, and prioritized remediation guidance, and present findings to technical and executive audiences.
- Develop cloud and AI security testing methodologies, playbooks, checklists, scripts, tools, and automation.
- Research emerging cloud and AI attack techniques and contribute to internal enablement, publications, conference presentations, and the security community.
- Mentor junior and mid-level team members, review their work, and support internal offensive-security lab infrastructure.
- Build trusted client relationships and travel when needed.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, or a related technical field, or equivalent professional experience.
- 8+ years of hands-on offensive security experience.
- Deep expertise in cloud penetration testing, preferably involving Azure, Entra ID, and Microsoft 365.
- Hands-on experience testing AI/LLM applications and agentic systems.
- Strong understanding of OAuth 2.0, OpenID Connect, SAML, conditional access, and token-based authentication.
- Working knowledge of RAG architectures, embeddings, vector stores, tool-calling, and model-hosting platforms.
- Proficiency with Python, PowerShell, Go, or Bash.
- Experience with traditional network, Active Directory, and web application penetration testing.
- Strong written, oral, presentation, organizational, prioritization, client-service, and deadline-management skills.
- Preferred qualifications include AWS or GCP security-testing experience, cloud and offensive-security certifications, agentic AI and MCP experience, mobile application penetration testing, published security research, red-team operations, or adversary emulation.
Benefits
- Remote position with travel when needed.
- Comprehensive medical, dental, and vision plans for employees and dependents.
- 401(k) retirement plan with employer match, 529 college savings plan, health savings account, life insurance, and long-term disability coverage.
- Training and development programs.
- Generous paid time off and work-life balance support.
- Major offices stocked with snacks and beverages and a collaborative workplace culture.
Categories
About Trace3
Trace3 is an IT solutions integrator and consulting firm that designs, implements, and operates data, security, and cloud infrastructure for enterprises. Its offerings span advisory services, systems integration, and managed operations across networking, storage, backup, and data platforms. Founded in 2002 and headquartered in Irvine, California, Trace3 is privately held and backed by American Securities.