Cybersecurity Engineer

We are looking for a highly skilled Security Engineer to lead and deliver comprehensive security engagements across both offensive and defensive domains. This role requires hands-on penetration testing, adversarial AI and large language model (LLM) system assessments, and the ability to build security functions from the ground up. You will collaborate closely with Plutus21 and its clients, balancing red-team operations with governance, policy development, and audit readiness. The ideal candidate will have deep expertise in offensive security, alongside strong capabilities in cloud security, incident response, and compliance management.

Key Responsibilities

Lead full-scope penetration tests on networks, applications, APIs, and cloud environments using recognized methodologies such as PTES, managing the process from initial scoping through to retesting. Conduct red-team and adversary simulation exercises aligned with the MITRE ATT&CK framework, focusing on realistic attack paths rather than isolated vulnerability reports. Perform authorized social engineering and phishing assessments as needed.

Provide detailed findings that include proof-of-concept exploits, business impact analysis, CVSS severity ratings, and actionable remediation guidance. Exploit and report on OWASP Top 10 web application vulnerabilities, with emphasis on PHP-based stacks like Laravel, WordPress, and legacy systems. Conduct deep source-assisted reviews and complex exploit chains involving object injection, deserialization, file upload abuses, and CMS/plugin weaknesses.

Test REST and GraphQL APIs and single-page applications against current attack vectors. Red-team AI and LLM systems against OWASP LLM Top 10 vulnerabilities, including prompt injection, jailbreaks, data exfiltration, insecure plugin use, and denial-of-service scenarios. Translate AI security findings into practical guardrails and test cases for engineering teams.

Integrate secure development practices into CI/CD pipelines through threat modeling, secure code review, and automated security testing such as SAST, DAST, dependency, and secret scanning. Design, deploy, and maintain security controls across cloud platforms (AWS preferred), corporate infrastructure, endpoints, and identity management systems. Manage identity and access with least-privilege principles, multi-factor authentication, and regular access reviews.

Establish and operate cloud security posture management tools. Monitor security threats and vulnerabilities, triage alerts, and lead incident detection, response, and post-incident analysis. Select, deploy, and manage security tooling including SIEM, EDR, vulnerability scanners, and CSPM solutions.

Develop and maintain security policies, standards, and procedures aligned with recognized frameworks. Drive compliance and audit readiness for SOC 2, ISO 27001, and NIST CSF, including evidence collection and control mapping. Assess vendor and client security postures, providing clear and prioritized remediation recommendations.

Communicate risks, incidents, and security metrics effectively to leadership and client stakeholders, translating technical risks into accessible language. Deliver security awareness training to internal teams. Define the security team’s structure, roadmap, and hiring plans as the function grows.

Required Qualifications

Minimum five years of hands-on cybersecurity experience with a strong offensive security focus, including penetration testing or red-teaming as a core responsibility. Proven expertise in web application security testing, particularly with PHP-heavy stacks such as Laravel, WordPress, or legacy custom code. In-depth knowledge of the OWASP Top 10 and modern web and API attack techniques, with demonstrated ability to produce working exploits beyond automated scanner results.

Familiarity with AI and LLM attack surfaces, including prompt injection, jailbreaks, and agent or retrieval-augmented generation (RAG) system abuses, or the capacity to learn these rapidly. Strong experience with at least one major cloud platform, preferably AWS, and its native security services. Practical skills in incident response, threat detection, and log analysis using SIEM and EDR tools.

Solid understanding of networking, operating systems, identity management, and encryption technologies. Proficiency in scripting and automation using Python, Bash, or PowerShell. Experience with compliance frameworks such as SOC 2, ISO 27001, or NIST CSF. Self-motivated and capable of independently establishing and managing a security function, prioritizing effectively under pressure. Excellent written and verbal communication skills in English, with the ability to translate complex technical risks into clear, non-technical language.

Preferred Qualifications and Benefits

Offensive security certifications such as OSCP (highly preferred), OSWE, OSEP, or CRTP. Broader industry credentials like CISSP, CEH, CompTIA Security+, or recognized cloud security certifications. A public track record including bug bounty achievements, CVEs, published research, or a portfolio of tools and write-ups.

Advanced proficiency with Burp Suite Professional and experience developing custom tooling or extensions. Hands-on experience with AI red-teaming against production LLM or agent systems. Exposure to multiple cloud platforms and experience working in consulting or multi-client delivery environments.

This role offers a unique opportunity to shape a security team from inception while engaging in cutting-edge offensive and defensive security work across diverse environments.