[Remote] Application Security Engineer

Note: The job is a remote job and is open to candidates in USA. Crossing Hurdles is a company seeking an Application Security Engineer to join their team. The role involves conducting advanced offensive security research, discovering vulnerabilities, and partnering with engineering teams to enhance security practices.

Responsibilities

• Conduct advanced offensive security research across cloud infrastructure and AI platforms
• Design and execute adversary simulations targeting identity systems and cloud control planes
• Discover and exploit vulnerabilities in applications, APIs, and CI/CD pipelines
• Research emerging attack vectors against LLMs and AI agents
• Reverse engineer services to uncover architectural weaknesses and novel exploitation techniques
• Simulate insider and advanced persistent threat scenarios to evaluate defense techniques
• Build custom offensive tooling and proof-of-concept exploits
• Partner with engineering teams to validate fixes and improve security practices
• Publish internal research and document attack methodologies

Skills

• Proven experience in offensive security, vulnerability research, or exploit development
• Deep understanding of cloud security across AWS and GCP
• Strong background in application security, code auditing, and reverse engineering
• Experience identifying weaknesses in software supply chains and CI/CD systems
• Proficiency in Python, Go, Rust, C/C++, or similar languages
• Strong understanding of operating system internals and modern security architectures
• Ability to investigate ambiguous problems and develop novel attack techniques
• Excellent written communication skills for explaining complex vulnerabilities

Company Overview