Twilio

2 weeks ago

Staff Engineer - Offensive Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Lead Twilio’s offensive security efforts as a technical authority, designing complex attack chains and conducting manual and automated testing across web apps, APIs, and mobile platforms. Validate vulnerabilities, triage scanner and bug bounty findings, and run AI/LLM prompt injection and jailbreak tests. Maintain testing infrastructure, build custom exploits and adversary emulation, and collaborate with SIRT and Detection Engineering to improve SIEM alerting and security outcomes.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Perform full-stack penetration testing across web applications, APIs, and iOS/Android mobile apps using manual and automated methods.
•Conduct internal/external network audits and validate vulnerability reports from scanners and bug bounty findings to reduce false positives and escalate true positives.
•Execute AI/LLM probing, including prompt injection and jailbreak tests using established checklists.
•Build and maintain offensive testing infrastructure and capabilities, including custom exploit development and adversary emulation/red team operations.
•Lead cloud/infrastructure security engagements and coordinate purple teaming with SIRT/Detection Engineering to tune SIEM alerts and improve detection.

Travel: Low travel

Pay and Benefits

Perks:Health Insurance401kPaid SickPaid PersonalParental Leave

Key Requirements

•7-10 years in offensive security, penetration testing, vulnerability exploitation, or AppSec, with experience finding high/critical issues in complex environments.
•Expert understanding of MITRE ATT&CK and OWASP Top 10 for web apps and top 10 for LLMs, including post-exploitation and adversarial ML.
•Proficiency with offensive security tooling such as Burp Suite, Nmap, Metasploit, and Wireshark, plus AI security tools like LangChain and TensorFlow.
•Ability to write scripting/code in Python or Bash and proficiency in coding like Python and C++ to automate and build custom offensive exploits.
•Advanced OffSec certifications (e.g., OSCP, OSEP, OSWE, GXPN) are highly desirable.

Experience:7-10 years

Skills:Technical leadershipWritten communicationVerbal communicationRelationship buildingInfluence

Certifications:OSCPOSEPOSWEGXPN

Languages:English

Tech Stack:OffSecBurp SuiteNmapMetasploitWiresharkCobalt StrikeSliverHavocPythonBashC++LangChainTensorFlowPyRITPromptfooGarakOWASP Top 10 for LLMsMITRE ATT&CKOWASP Top 10AWS

Company Brief

Twilio

Provides cloud communications platforms and APIs enabling developers to add voice, messaging, video, and authentication features to applications. Serves enterprises and developers with programmable communications, engagement, and customer interaction tools.

Industry: API Platforms

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2008

Glassdoor: 4.0

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Twilio

2 weeks ago

Staff Engineer - Offensive Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Perform full-stack penetration testing across web applications, APIs, and iOS/Android mobile apps using manual and automated methods.
•Conduct internal/external network audits and validate vulnerability reports from scanners and bug bounty findings to reduce false positives and escalate true positives.
•Execute AI/LLM probing, including prompt injection and jailbreak tests using established checklists.
•Build and maintain offensive testing infrastructure and capabilities, including custom exploit development and adversary emulation/red team operations.
•Lead cloud/infrastructure security engagements and coordinate purple teaming with SIRT/Detection Engineering to tune SIEM alerts and improve detection.

Travel: Low travel

Pay and Benefits

Perks:Health Insurance401kPaid SickPaid PersonalParental Leave

Key Requirements

•7-10 years in offensive security, penetration testing, vulnerability exploitation, or AppSec, with experience finding high/critical issues in complex environments.
•Expert understanding of MITRE ATT&CK and OWASP Top 10 for web apps and top 10 for LLMs, including post-exploitation and adversarial ML.
•Proficiency with offensive security tooling such as Burp Suite, Nmap, Metasploit, and Wireshark, plus AI security tools like LangChain and TensorFlow.
•Ability to write scripting/code in Python or Bash and proficiency in coding like Python and C++ to automate and build custom offensive exploits.
•Advanced OffSec certifications (e.g., OSCP, OSEP, OSWE, GXPN) are highly desirable.

Experience:7-10 years

Skills:Technical leadershipWritten communicationVerbal communicationRelationship buildingInfluence

Certifications:OSCPOSEPOSWEGXPN

Languages:English

Tech Stack:OffSecBurp SuiteNmapMetasploitWiresharkCobalt StrikeSliverHavocPythonBashC++LangChainTensorFlowPyRITPromptfooGarakOWASP Top 10 for LLMsMITRE ATT&CKOWASP Top 10AWS

Company Brief

Twilio

Industry: API Platforms

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2008

Glassdoor: 4.0

Website LinkedIn