Lead, Offensive Security

About the role

We're standing up a new AI & Offensive Tooling capability inside our Offensive Security organization, and we're looking for its founding engineer.

Responsibilities

• Own the in-house AI agent platform that powers our penetration testing and red team operations.
• Build the AI-driven tooling that makes every offensive service line faster, broader, and more autonomous.
• Set the technical direction for offensive AI at the company, and ship the software that proves it.
• Build autonomous and semi-autonomous agents that perform real offensive operations against networks, web applications, and infrastructure.
• Test and validate the guardrails and classifiers of the enterprise's own AI systems.

Requirements

• 6+ years in roles such as Red Team or Penetration Testing, including team- or program-level leadership.
• A strong track record of building and operating production-quality software and tooling.
• Hands-on designing, building, or operating AI agents or LLM applications.
• Hands-on testing of AI/ML systems, including prompt injection, jailbreaking, and adversarial techniques.
• Production experience with at least one major Cloud Service Provider (AWS, GCP, or Azure).

Qualifications

• Offensive security depth: 6+ years in roles such as Red Team or Penetration Testing, including team- or program-level leadership.
• Production Python engineering: a strong track record of building and operating production-quality software and tooling.
• Hands-on with AI red-teaming frameworks such as PyRIT or Garak, and fluent in MITRE ATLAS, the OWASP Top 10 for LLM Applications, and the NIST AI Risk Management Framework.
• Model Context Protocol (MCP): building clients/servers, or testing them and RAG pipelines for tool/prompt-injection abuse.
• Demonstrated ability to test endpoints protected by modern EDR/XDR.
• Experience across multiple cloud providers.
• Threat-intelligence-driven operations.
• Depth in an advanced offensive specialty: malware development, advanced Red Team operations and threat simulation, or adversarial ML research.
• Published research, open-source contributions, or talks at DEF CON, BSides, x33fcon, or Black Hat.
• Expert-level certifications (e.g. OSEE, OSED, OSCE3, CRTL, CWEE, CAPE).

Skills

• Autonomous or semi-autonomous offensive agents.
• LLM-driven penetration-testing agents.
• Reinforcement-learning exploit and attack-path planners.
• Testing of AI/ML systems, including prompt injection, jailbreaking, and adversarial techniques.
• Cloud fluency with AWS, GCP, or Azure.

Benefits

Fridays are dedicated to research and development, enabling continuous advancement in offensive security methodologies, tools, agents, and large language models (LLMs).

The role comes with a competitive benefits package, including medical, dental, and vision benefits, a 401(k) retirement savings plan, time off, short-term and long-term disability, life insurance, and many other opportunities.

Humana is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or disability.