Member of Technical Staff (Offensive Security Engineer)
Perplexity7 months ago
Base Salary
$220k - $405k/yr
Responsibilities
- Plan and execute red team and purple team engagements simulating advanced threat actors across cloud infrastructure, endpoints, and application surfaces.
- Conduct continuous penetration testing of web applications, APIs, mobile clients, browser extensions, cloud infrastructure, and internal services.
- Assess AI/ML-specific attack surfaces, including prompt injection, model exfiltration, agent abuse, tool-use exploitation, and MCP security boundaries.
- Develop and maintain custom offensive tooling, exploits, and automation.
- Perform adversary simulations to test detection and response capabilities in collaboration with the defensive security team.
- Lead threat modeling sessions with engineering teams and identify and prioritize attack vectors.
- Communicate actionable findings to technical and executive audiences and partner with engineering to validate remediations.
- Assess CI/CD pipelines, supply chain integrity, and secrets management from an offensive security perspective.
- Track emerging attack techniques, vulnerability research, and adversary tradecraft.
Requirements
- At least 5 years of hands-on experience in offensive security, red teaming, or penetration testing.
- Deep expertise in at least two of cloud security, web/API application security, Kubernetes and container security, macOS/Linux endpoint security, network penetration testing, or CI/CD pipeline security.
- A track record of discovering impactful vulnerabilities or developing novel attack techniques in production environments.
- Strong programming and scripting skills in Python, Go, or similar languages, including the ability to write custom tooling and exploits.
- Experience with Burp Suite, Cobalt Strike, Sliver, Mythic, Metasploit, BloodHound, nuclei, or comparable offensive tools.
- Experience assessing AI/ML systems, LLM applications, or agentic workflows for security vulnerabilities.
- Excellent written and verbal communication skills and the ability to translate technical findings into clear risk narratives.
- Preferred qualifications include published security research, conference talks at DEF CON, Black Hat, or BSides, CVE credits, or meaningful bug bounty contributions.
Tech Stack
Categories
About Perplexity
Perplexity builds an AI-powered answer engine for web and mobile and an enterprise product, Perplexity Computer, for AI-driven workflows across tools and apps. The company monetizes through individual subscriptions (Perplexity Pro) and enterprise plans. Founded in 2022 and headquartered in San Francisco, it operates as a privately held company.