Senior Offensive Security Engineer

Array is a financial innovation platform that helps digital brands, financial institutions, and fintechs get compelling consumer products to market faster. They are seeking a Senior Offensive Security Engineer to validate the security of their products through real-world exploitation, leveraging AI to enhance vulnerability discovery and analysis.

Responsibilities:

• Identify, validate, and demonstrate realistic attack paths against Array's products, infrastructure, and internal systems with a focus on business impact
• Analyze large, multi-language codebases using AI and manual techniques to uncover vulnerabilities, generate exploit hypotheses, and perform variant analysis
• Build safe proof-of-concept exploits that demonstrate unauthorized access, privilege escalation, data exposure, business logic flaws, or other meaningful security risks
• Partner with engineering to validate remediations, confirm exploit paths are fully eliminated, and identify similar patterns elsewhere in the environment
• Document findings with clear evidence, technical root cause, business impact, and practical remediation guidance while continuously improving Array's offensive security capabilities
• Maintain a habit of using AI tools to think, build, and ship faster—it’s your default, not an afterthought

Requirements:

• 5+ years of offensive security, application security, penetration testing, or red team experience with a track record of finding real application vulnerabilities
• Deep expertise in modern web applications, APIs, authentication, authorization, distributed systems, and the OWASP Top 10
• Experience developing proof-of-concept exploits that demonstrate real business impact, not just theoretical risk
• Proficiency using AI to accelerate vulnerability discovery, exploit development, code analysis, and security research while validating AI-generated output
• Strong communication skills with the ability to explain complex vulnerabilities, attack paths, and remediation guidance to engineering teams
• A belief that AI is reshaping work, you instinctively use it to accelerate everything you do