Cybersecurity Engineer

We are seeking a highly skilled and versatile Security Engineer who can confidently lead offensive security engagements while also establishing and managing defensive security functions. This role involves hands-on penetration testing, adversarial testing of AI and large language models (LLMs), and building security programs from the ground up. You will work across Plutus21 and its clients, balancing red-team exercises with governance, policy writing, audit preparation, and tooling development. This position requires a proactive individual capable of setting foundations, driving processes, and growing a security team as demand increases.

Key Responsibilities

- Conduct comprehensive penetration tests on networks, applications, APIs, and cloud environments using recognized methodologies such as PTES, from initial scoping through to retesting.
- Lead red-team and adversary simulation exercises aligned with the MITRE ATT&CK framework, focusing on realistic attack paths rather than isolated vulnerabilities.
- Perform social engineering and phishing assessments when authorized.
- Deliver detailed findings including proof-of-concept exploits, business impact analysis, severity ratings (CVSS), and actionable remediation guidance.
- Exploit and report on the full OWASP Top 10 web application vulnerabilities, with deep expertise in PHP-based stacks such as Laravel, WordPress, and legacy custom applications.
- Test APIs (REST and GraphQL) and single-page applications against current attack vectors.
- Red-team AI and LLM systems against the OWASP LLM Top 10, including prompt injection, jailbreaks, data exfiltration, and denial-of-service attacks.
- Translate AI security findings into practical guardrails and test cases for engineering teams.
- Embed secure development practices within engineering pipelines, including threat modeling, secure code review, and security testing (SAST, DAST, dependency and secret scanning) integrated into CI/CD workflows.
- Design, deploy, and maintain security controls across cloud platforms (AWS preferred), corporate infrastructure, endpoints, and identity management systems.
- Manage identity and access with a least-privilege approach, enforcing MFA and conducting regular access reviews.
- Implement and operate cloud security posture management (CSPM) tools.
- Monitor security alerts, triage threats, and lead incident detection, response, and post-incident reviews.
- Select, deploy, and manage security tooling such as SIEM, EDR, vulnerability scanners, and CSPM.
- Develop and maintain security policies, standards, and procedures aligned with recognized frameworks.
- Drive compliance and audit readiness for SOC 2, ISO 27001, and NIST CSF, including evidence collection and control mapping.
- Assess vendor and client security postures, providing clear, prioritized remediation recommendations.
- Communicate risks, incidents, and security metrics effectively to leadership and clients, translating technical risks into understandable language.
- Deliver security awareness training to internal teams.
- Define the security team’s structure, roadmap, and hiring plans as the function expands.
- Within the first 90 days, conduct an internal penetration test of Plutus21’s cloud and applications, establish core security tooling, deliver an external client engagement, and publish initial security policies and SOC 2 control mappings.

Required Qualifications

- Minimum five years of hands-on cybersecurity experience with a strong offensive security focus (penetration testing or red-teaming as a primary responsibility).
- Proven expertise in web application testing, particularly with PHP-heavy environments such as Laravel, WordPress, or legacy custom codebases.
- Deep understanding of the OWASP Top 10 and modern web/API attack techniques, with demonstrated ability to produce working exploits beyond automated scanner results.
- Knowledge of AI and LLM attack surfaces, including prompt injection, jailbreaks, and agent/RAG system abuses, or the ability to quickly acquire this expertise.
- Strong experience with at least one major cloud platform (AWS preferred) and its native security tools.
- Practical skills in incident response, threat detection, and log analysis using SIEM and EDR solutions.
- Solid foundation in networking, operating systems, identity management, and encryption.
- Proficiency in scripting and automation using Python, Bash, or PowerShell.
- Familiarity with compliance frameworks such as SOC 2, ISO 27001, or NIST CSF.
- Self-directed and able to prioritize effectively under pressure, comfortable owning the security function independently.
- Excellent written and verbal communication skills, capable of translating complex technical risks into clear, accessible language for non-technical stakeholders.

Preferred Qualifications and Benefits

- Offensive security certifications such as OSCP (strongly preferred), OSWE, OSEP, or CRTP.
- Broader security credentials including CISSP, CEH, CompTIA Security+, or recognized cloud security certifications.
- Publicly recognized contributions such as bug bounty achievements, CVEs, published research, or a portfolio of tools and write-ups.
- Proficiency with Burp Suite Professional and experience developing custom tooling or extensions.
- Hands-on experience with AI red-teaming against production LLM or agent systems.
- Exposure to multiple cloud platforms and experience working in consulting or multi-client delivery environments.

This role offers the opportunity to shape and lead a critical security function within a dynamic environment, working on cutting-edge offensive and defensive security challenges.