9 hours ago
Base Salary
$270k - $330k/yr
Responsibilities
- Conduct continuous hands-on penetration testing and red team assessments across applications, APIs, AI/ML pipelines, and cloud environments.
- Build agentic security tooling and automated pipelines to discover, validate, prioritize, and remediate vulnerabilities.
- Develop offensive tooling, exploit chains, attack simulations, and adversarial tests for AI-specific attack surfaces.
- Research vulnerabilities and identify logic flaws, authentication bypasses, and chained exploits beyond automated scanner output.
- Lead threat modeling, purple team exercises, and security-control validation with engineering and infrastructure teams.
- Contribute to backend code, fix critical vulnerabilities, harden authentication and authorization, and build security primitives.
- Own external penetration-testing relationships and drive findings through remediation to closure.
- Share offensive security techniques and findings with engineering and leadership.
Requirements
- Professional penetration-testing experience across web applications, APIs, and cloud environments, ideally including AI/ML systems.
- Experience writing exploits and building or developing agentic security tooling.
- Professional development experience with a strongly typed language such as Rust, Go, Java, or C++, plus scripting with Python or Bash.
- Familiarity with Burp Suite, Nuclei, Semgrep, custom fuzzing frameworks, and offensive tooling development.
- Experience integrating SCA, SAST, and DAST security checks into CI/CD pipelines.
- Experience with Terraform, Kubernetes, and identifying misconfigurations and attack paths in AWS or GCP.
- Knowledge of threat modeling, cryptography fundamentals, and compliance frameworks including SOC 2, ISO 27001/42001, and NIST CSF.
- OSCP, OSWE, GXPN, GWAPT, CPTS, or similar offensive security certifications are a bonus.
- Experience with regulated multi-tenant SaaS, cloud penetration testing, Kubernetes security testing, bug bounties, published CVEs, or customer-facing security discussions is a bonus.
Benefits
- Opportunity to work on enterprise AI products for leading financial institutions.
- Significant ownership over security capabilities at a rapidly scaling startup.
- Collaboration with a highly experienced team working at the intersection of AI and finance.
Categories
About Rogo
Rogo builds an AI operating system for finance, offering a suite of agents that handle sourcing, diligence, modeling, and turning analysis into deliverables for investment banks, private equity funds, and investment firms. It sells enterprise software and advisory services to large financial institutions. Founded in 2022 and headquartered in New York, the privately held company focuses on Wall Street workflows and is used by global finance teams.