Offensive Security Engineer

About the Position

Offensive Security Engineer

Join CloudWalk as an Offensive Security Engineer to break systems, exploit vulnerabilities, and build automations for robust security.

About CloudWalk

We are not just another fintech unicorn. We are a pack of dreamers, makers, and tech enthusiasts building the future of payments. With millions of customers and a hunger for innovation, we're now expanding our neural network - literally and metaphorically.

This is not a traditional pentesting role. At CloudWalk, you’ll go beyond running scans or writing reports. You’ll break into systems, exploit real weaknesses, and then engineer automations and agents to make sure those classes of vulnerabilities never come back. Your work will directly shape how CloudWalk defends itself at scale, turning offensive security knowledge into defensive engineering.

You’ll be part of a team that blends red teaming, mobile/web pentesting, and security automation. If you enjoy moving fast, exploiting hard problems, and coding the solutions, this role is for you.

Responsibilities

• Break things that matter. Pentest applications across our stack, identifying vulnerabilities in APIs, mobile apps (Android/iOS), and infrastructure before attackers do.
• Run red team operations. Plan and execute realistic attack campaigns: phishing with custom domains, social engineering, lateral movement, privilege escalation. Measure real organizational resilience, not checkbox compliance.
• Build offensive tooling. Engineer security platforms, scanning pipelines, and automation that multiply the team's impact.
• Weaponize AI for defense. Design and build LLM-powered agents that detect, classify, triage, and fix vulnerabilities in real time.

Requirements

• Strong knowledge of common vulnerabilities, exploitation techniques, and secure coding practices. You can find bugs in source code, not just with a proxy.
• Experience with web application and API pentesting. Mobile pentesting (Android/iOS) is a strong plus.
• You code daily. Proficiency in Typescript, Go, or similar, not just scripts, but tools and services others can rely on.
• Familiarity with cloud infrastructure security (GCP/AWS/Azure), Kubernetes, and service mesh concepts.
• Understanding of CI/CD pipelines and how to embed security checks into them.
• Experience leveraging LLMs or AI agents for security tasks.
• Excellent communication and collaboration skills to work effectively with engineering teams.

Nice to Have

• Experience with red team operations: phishing infrastructure, social engineering, C2 frameworks.
• Familiarity with payment industry security (PCI DSS, card tokenization, acquiring flows).
• Experience building security platforms or internal tooling (dashboards, bots, vulnerability management systems).
• Contributions to open source security tools, published security research, or CTFs.

The Future We See

At CloudWalk, we envision a future where AI empowers every field to reach new heights:

• People teams leveraging AI to transform talent acquisition and employee development.
• Marketing professionals creating data-driven, AI-powered campaign strategies.
• Customer Success teams enhancing client experiences with intelligent solutions.
• Risk analysts combining human expertise with AI to navigate complexities.
• Designers collaborating with AI to push creative boundaries.

Join us at CloudWalk, where we're not just engineering solutions; we're building a smarter, AI-driven future for payments-together.