Senior Software Engineer

Proactive risk indentification and discovery Proactively find risks that traditional methods such as reviews, attestations and scans do not catch, across the internal, external and support portfolios. Use data sources, telemetry, asset inventories and business processes to connect signals across systems, spot gaps and anomalies, and uncover hidden or emerging risk. Form and test risk hypotheses, validate findings, and quantify exploitability, blast radius and business impact. Drive remediation with asset owners and track risk to closure. AI penetration testing and novel scenarios Discover and exploit vulnerabilities end to end to assess the security of AI systems, agents, copilots, connectors and generative AI solutions. Execute penetration testing operations on production AI systems using real-world adversarial tactics and techniques. Research and test new and emerging threats, including prompt injection, agent-to-agent trust abuse, tool and memory poisoning and model supply chain risk, before they areexploited. Stay current with penetration testing tools, methodologies, tactics and mitigations. Accelerate Turn systemic, repeating risk patterns into automated detections, agent test cases or policy updates, so the same class of risk is caught at scale without another manual hunt. Develop tools and techniques that scale AI penetration testing, vulnerability discovery and risk hunting, including contributions to TrIP testing and assessment agents. Develop, operationalize and maintain penetration testing and risk hunting procedures and methodologies. Business enablement Act as a trusted risk advisor, translating technical risk into business impact and clear go, go-with-conditions or no-go guidance. Partner with teams early in design to help them launch solutions with the right protections instead of being blocked late. Produce high-quality reports, papers and presentations, including risk posture and trend readouts for leadership. Bachelor's Degree in Computer Science or related technical field AND 4+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience. Master's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR Bachelor's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience. 5+ years of experience in identifying security vulnerabilities, software development lifecycle, large-scale computing, modeling, cyber security and anomaly detection. 5+ years of experience using common penetration testing tools such as Kali Linux, Burp Suite, Nmap and Nessus. 5+ years of experience with one or more programming languages: Python, C#, C/C++, PowerShell. Experience analyzing large data sets and telemetry to identify risk, anomalies or threats (for example, KQL/Kusto, SQL or Python data analysis). Hands-on experience with AI and LLM security, including prompt injection, agent threat modeling and the OWASP Top 10 for LLM Applications. Experience in threat hunting, risk assessment or detection engineering, including building automated detections from findings. Familiarity with cloud and identity security (Azure, Entra ID, app registrations and permissions) and asset inventory or posture management. Ability to understand business processes and connect technical findings to business and operational risk. Penetration testing qualifications such as GPEN/GXPN, GWAPT, OSCP/OSCE or CRT/CCT/CCSAS.