Cybersecurity Engineer

We are seeking a highly skilled and versatile Security Engineer to lead and deliver across a broad range of cybersecurity engagements. This role primarily focuses on offensive security, including network and application penetration testing, web and PHP application exploitation, and adversarial testing of AI and large language models (LLM). Beyond offensive tasks, you will also establish and manage defensive controls, develop security policies, and ensure compliance with audits. Operating within Plutus21 and its client environments, you will balance hands-on technical work with governance, tooling development, and team-building as the security function expands.

Key Responsibilities

- Conduct comprehensive penetration tests on networks, applications, APIs, and cloud environments using recognized methodologies such as PTES, covering all phases from scoping to retesting.
- Execute red-team and adversary simulation exercises aligned with the MITRE ATT&CK framework, delivering realistic attack scenarios rather than isolated vulnerability reports.
- Perform social engineering and phishing assessments when authorized.
- Provide detailed findings with proof-of-concept exploits, business impact analysis, severity ratings (CVSS), and actionable remediation guidance.
- Exploit and report on the full OWASP Top 10 vulnerabilities, with deep expertise in PHP application testing (Laravel, WordPress, and legacy custom stacks), including source-assisted review and complex exploitation techniques.
- Test REST and GraphQL APIs and single-page applications against current attack vectors.
- Red-team AI and LLM systems focusing on prompt injection, jailbreaks, data exfiltration, insecure tool use, and denial-of-service risks, translating findings into engineering guardrails and test cases.
- Integrate secure development practices into CI/CD pipelines, including threat modeling, secure code review, and security testing (SAST, DAST, dependency and secret scanning).
- Design, implement, and maintain security controls across cloud platforms (preferably AWS), corporate infrastructure, endpoints, and identity management systems, enforcing least-privilege access with MFA and regular reviews.
- Lead security operations including threat monitoring, alert triage, incident response, and post-incident analysis, while managing SIEM, EDR, vulnerability scanning, and cloud security posture management tools.
- Develop and maintain security policies, standards, and procedures aligned with recognized frameworks.
- Drive compliance and audit readiness for SOC 2, ISO 27001, and NIST CSF, including evidence collection and control mapping.
- Assess vendor and client security postures, providing clear, prioritized remediation recommendations.
- Communicate risks, incidents, and security metrics effectively to leadership and non-technical stakeholders.
- Deliver security awareness training for internal teams.
- Define the security team’s structure, roadmap, and hiring plan as the function grows.
- Within the first 90 days, conduct an internal penetration test of Plutus21’s cloud and applications, establish core security tooling, complete an external client engagement, and publish initial security policies and SOC 2 control mappings.

Required Qualifications

- Minimum five years of hands-on cybersecurity experience with a strong focus on offensive security, including penetration testing or red teaming as a primary responsibility.
- Proven expertise in web application testing, particularly with PHP-heavy environments such as Laravel, WordPress, or legacy custom codebases.
- Deep understanding of the OWASP Top 10 and modern web and API attack techniques, with demonstrated ability to produce working exploits.
- Familiarity with AI and LLM attack surfaces, including prompt injection and jailbreaks, or the aptitude to quickly acquire this knowledge.
- Solid experience with at least one major cloud platform (AWS preferred) and its native security services.
- Practical skills in incident response, threat detection, and log analysis using SIEM and EDR tools.
- Strong foundational knowledge of networking, operating systems, identity management, and encryption.
- Proficiency in scripting and automation using Python, Bash, or PowerShell.
- Experience with compliance frameworks such as SOC 2, ISO 27001, or NIST CSF.
- Self-motivated and capable of independently managing a security function from inception, with strong prioritization skills under pressure.
- Excellent written and verbal communication skills, able to translate complex technical risks into clear, accessible language for diverse audiences.

Preferred Qualifications and Benefits

- Offensive security certifications such as OSCP (highly preferred), OSWE, OSEP, or CRTP.
- Broader security credentials including CISSP, CEH, CompTIA Security+, or recognized cloud security certifications.
- A public record of security contributions, such as bug bounty achievements, CVEs, published research, or a portfolio of tools and write-ups.
- Proficiency with Burp Suite Professional, including custom tooling or extension development.
- Hands-on experience with AI red-teaming against production LLM or agent systems.
- Exposure to multiple cloud environments and experience working in consulting or multi-client delivery settings.

This role offers the unique opportunity to shape and lead a comprehensive security program, combining offensive expertise with strategic governance and client-facing responsibilities.