Trace3 - Sr. Architect | Offensive Security/ AI Testing/ Cloud Testing (Remote)

• Bachelor’s degree in Computer Science, Information Technology, or a related technical field, or equivalent professional experience • Deep expertise in cloud penetration testing, preferably Azure, Entra ID, and Microsoft 365 (e.g., ROADtools, AzureHound, MicroBurst, GraphRunner, Prowler, ScoutSuite) • Hands-on experience testing AI/LLM applications and agentic systems (e.g., PyRIT, garak, promptfoo, Burp Suite) • Strong understanding of cloud identity and access management, including OAuth 2.0, OpenID Connect, SAML, conditional access, and token-based authentication • Working knowledge of how LLM applications are built and deployed, including RAG architectures, embeddings and vector stores, tool-calling, and model hosting platforms • Proficiency in scripting and development using languages such as Python, PowerShell, Go, or Bash • Solid foundation in traditional penetration testing (network, Active Directory, and web applications) and common tooling such as Burp Suite, BloodHound, and Metasploit • Excellent written communication skills with the ability to produce clear, client-ready reports • Excellent oral communication and presentation skills, with the ability to present findings to C-level executives and non-technical audiences • Highly organized, detail-oriented, excellent time management skills, and able to effectively prioritize tasks in a fast-paced, high-volume, and evolving work environment • Ability to approach client requests in a proactive and consultative manner; listen, understand client needs, and effectively deliver • Comfortable managing multiple and changing priorities, and meeting deadlines in an entrepreneurial environment • Motivated self-starter who loves to solve challenging problems and feels comfortable working directly with clients • Ability to travel when needed • Cloud-focused certifications such as CARTP, CARTE, GCPN, or AZ-500 • Offensive security certifications such as OSCP, OSEP, OSWE, OSAI, HTB COAE or GXPN • Hands-on experience with AWS and/or GCP security testing in addition to Azure • Experience testing agentic AI systems, including Model Context Protocol (MCP) integrations and multi-agent workflows • Mobile application penetration testing experience for iOS and Android (e.g., Frida, Objection, MobSF, jadx), aligned to OWASP MASVS and MASTG • Mobile-focused certifications such as GMOB or eMAPT • Published security research, CVEs, conference talks, or contributions to open-source offensive tooling • Experience with red team operations or adversary emulation • Actual salary will be based on a variety of factors, including location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base salary.