
Lead / Senior Offensive Security Engineer (Offsec AI Team)
InformaticaResponsibilities
- Perform security assessments and vulnerability research across web applications, APIs, and cloud or hybrid infrastructure.
- Conduct exploitation, vulnerability chaining, business-logic and authorization abuse, privilege escalation, and lateral movement testing.
- Run end-to-end engagements including scoping, execution, reporting, and remediation guidance.
- Identify systemic and architectural weaknesses and drive secure-by-default fixes.
- Partner with engineering, security architecture, and detection and response teams to address root causes and validate controls.
- Produce technical reports with clear exploitation paths and prioritized remediation.
- Develop AI automation and autonomous harnesses for continuous, scalable offensive security testing.
- Design agent-based workflows for reconnaissance, risk-signal planning, hypothesis ranking, vulnerability chaining, exploitation, assessment, and reporting.
- Establish human-in-the-loop checkpoints and translate offensive security tradecraft into reusable, explainable automation.
Requirements
- 6+ years of hands-on offensive security experience for Senior candidates or 8+ years for Lead candidates, including pentesting, red teaming, or application security research.
- Deep knowledge of cloud and web application security, including OWASP Top 10+ vulnerability classes, identity and authorization attack vectors, and cloud or hybrid attack surfaces.
- Hands-on experience using internal AI tools and frontier models to perform or accelerate security testing.
- Software engineering fundamentals including system design, API integration, and distributed services and technologies.
- Ability to write custom scripts, tooling, and payloads and contribute to automation, autonomous harnesses, and prompt engineering.
- Excellent written and verbal communication skills.
- Preferred: experience with agentic frameworks, prompt optimization, agent evaluation, or lightweight model fine-tuning.
- Preferred: published security research, CVEs, or conference talks.
- Preferred: familiarity with MITRE ATT&CK, MITRE ATLAS, and offensive AI/ML attack surfaces such as prompt injection and agentic privilege abuse.
Benefits
- Wellbeing reimbursement, generous parental leave, adoption assistance, fertility benefits, and other Salesforce benefits.
- Open to Flex work with 1–3 days per week in the office or office-based work with 4–5 days per week in the office.
Categories
About Informatica
Informatica (NYSE: INFA), a leader in AI-powered enterprise cloud data management, helps businesses unlock the full value of their data and AI. As data grows in complexity and volume, Informatica’s Intelligent Data Management Cloud™ delivers a complete, end-to-end platform with a suite of industry-leading, integrated solutions to connect, manage and unify data across any cloud, hybrid or multi-cloud environment. Powered by CLAIRE® AI, Informatica’s platform integrates natively with all major cloud providers, data warehouses and analytics tools— giving organizations the freedom of choice, avoiding vendor lock-in and delivering better ROI by enabling access to governed data, simplifying operations and scaling with confidence. Trusted by approximately 5,000 customers in nearly 100 countries—including over 80 of the Fortune 100—Informatica is the backbone of platform-agnostic, cloud data-driven transformation. Informatica. Where data and AI come to life.™ Contact: PR@informatica.com