Offensive Security Engineer

About the role

CloudWalk is looking for an Offensive Security Engineer who will go beyond traditional pentesting. You will actively break into systems, exploit real weaknesses, and build automated defenses to ensure those vulnerabilities never return.

Key responsibilities

• Perform comprehensive pentests on applications, APIs, mobile apps (Android/iOS) and infrastructure.
• Plan and execute realistic red‑team campaigns, including phishing, social engineering, lateral movement and privilege escalation.
• Develop offensive tooling, security platforms and scanning pipelines that amplify the team’s impact.
• Design LLM‑powered agents to detect, classify, triage and remediate vulnerabilities in real time.

Required profile

• Strong knowledge of common vulnerabilities, exploitation techniques and secure coding practices.
• Ability to find bugs directly in source code, not only via proxies.
• Experience with web application and API pentesting; mobile pentesting is a strong plus.
• Daily coding experience with languages such as Typescript or Go.
• Familiarity with cloud infrastructure security (GCP, AWS, Azure), Kubernetes and service‑mesh concepts.
• Understanding of CI/CD pipelines and embedding security checks.
• Experience leveraging LLMs or AI agents for security tasks.
• Excellent communication and collaboration skills.

Required skills

• Typescript
• Go
• Web application pentesting
• API security testing
• Android and iOS mobile security testing
• GCP, AWS, Azure
• Kubernetes
• Service‑mesh concepts
• CI/CD pipeline integration
• LLM/AI agent development