Offensive Security Lead

Position Overview

This role involves leading offensive security efforts for an innovative cloud platform that supports AI workloads, based in Germany. The successful candidate will build and manage an internal red team, perform advanced security tests, and drive offensive security strategies to protect cloud and AI infrastructures.

Key Responsibilities

• Establish and lead a red team while developing scalable offensive security methodologies.
• Develop and enhance penetration testing and adversarial simulations across cloud infrastructure, networking, AI platforms, and internal systems.
• Continuously validate and improve threat models within secure software development lifecycles, automating validations when feasible.
• Conduct sophisticated red team exercises to identify vulnerabilities in critical business systems, collaborating with detection teams in purple team activities.
• Investigate new attack vectors targeting AI GPU infrastructure, virtualization, tenant isolation, and cloud-native technologies.
• Assess security of new products and infrastructure modifications before deployment to mitigate risks early.
• Produce clear, prioritized reports offering actionable remediation advice for technical and management audiences.
• Enhance offensive security tools, processes, and capabilities to support a dynamic technology landscape.

Candidate Requirements

• At least 6 years of professional experience in offensive security roles such as penetration testing, red teaming, or adversarial simulation, including leadership or mentoring duties.
• In-depth knowledge of attacking cloud-native environments with expertise in Kubernetes, identity and access management, virtualization, container security, and privilege escalation.
• Strong understanding of the complete attack lifecycle: compromise, persistence, lateral movement, escalation, and data exfiltration.
• Proficiency in creating offensive security tools or automation utilizing programming languages like Python or Go.
• Experience orchestrating purple team exercises and collaborating closely with defensive security teams.
• Excellent analytical and communication skills, able to convey technical risks effectively to business stakeholders.
• Additional advantage for experience in AI infrastructure, GPU clusters, reverse engineering, exploit development, kernel exploitation, vulnerability research, cloud internals, or delivering security research presentations.

Benefits and Work Environment

• Attractive salary package with equity participation.
• Fully remote work arrangement with flexibility.
• High degree of autonomy and ownership over security initiatives.
• Opportunities for career growth and ongoing learning.
• Collaborative, international team focused on cutting-edge AI infrastructure.
• Chance to establish a security function from scratch and influence security strategy.
• Exposure to complex, large-scale cloud and AI security problems.

Additional Information

This job is managed by a partner company that handles all applications and next steps. The hiring process uses AI-assisted matching to identify best-fit candidates, with final decisions made internally by the hiring organization.