Senior Software Developer - Offensive AI (Global Security)

Accountabilities:

• Design, build, and maintain agentic workflows and AI-enabled tooling supporting Red Team operations, including reconnaissance, analysis, reporting, and post-exploitation activities.
• Translate operator requirements, security research, and prototypes into production-grade services, APIs, automation pipelines, and reusable engineering solutions.
• Apply Retrieval-Augmented Generation (RAG), vector search, and retrieval-based approaches to make offensive security knowledge and research accessible and actionable in real time.
• Instrument and evaluate agentic systems using observability and AI evaluation tooling to ensure outputs are reliable, explainable, measurable, and safe for operational use.
• Continuously test, tune, and validate agent behavior against real-world security use cases, incorporating feedback from operators and researchers.
• Partner directly with Red Team professionals to identify opportunities where AI and automation can reduce manual effort, accelerate workflows, or enable new offensive tradecraft.
• Support Purple Team exercises by developing tooling that helps translate offensive findings into actionable detection and defensive security improvements.
• Communicate technical designs, capabilities, limitations, and implementation considerations clearly to Red Team leadership and internal stakeholders.
• Contribute to software architecture and engineering practices that promote scalability, maintainability, reliability, and secure production deployment.

Requirements

• Bachelor’s degree in Computer Science or a related technical discipline.
• 4+ years of professional software development experience, with a strong understanding of software design patterns, architecture, and the software development lifecycle.
• Hands-on experience building agentic workflows or working with frameworks such as LangGraph, Google ADK, or OpenAI Agents SDK.
• Experience with AI evaluation, monitoring, and observability platforms such as LangSmith, Langfuse, or Weights & Biases.
• Practical experience with RAG, vector search, embeddings, or other retrieval-based AI systems.
• Strong backend development experience and experience building REST APIs using frameworks such as FastAPI, Flask, Spring, or equivalent technologies.
• Experience with event-driven architectures, message queues, asynchronous processing, or similar distributed workflow patterns.
• Comfortable working with cloud platforms such as AWS and Azure, CI/CD pipelines including GitHub Actions, and container technologies such as Docker and Kubernetes.
• Commitment to writing clean, maintainable, scalable, and production-grade code.
• Strong critical-thinking and problem-solving skills, with the ability to work effectively in ambiguous and rapidly evolving environments.
• Experience in Red Team operations, penetration testing, adversary emulation, vulnerability research, or other cybersecurity functions is highly desirable.
• Genuine interest in ethical hacking, offensive security, malware, Red Teaming, and emerging offensive cyber operations.
• Relevant technical and offensive security certifications such as OSCP, OSCE, OSED, OSEE, GXPN, GPEN, or GWAPT are considered an advantage.
• Financial industry experience is a strong asset but is not required.
• Strong communication, collaboration, decision-making, and stakeholder-management abilities.

Benefits

• Comprehensive Total Rewards Program including bonuses and flexible benefits.
• Competitive compensation, with commissions and stock opportunities where applicable.
• Dedicated annual budget for professional training and conference attendance.
• Access to industry-leading offensive security, AI, cloud, and technical training opportunities.
• Exposure to advanced topics such as AI Red Teaming, adversary simulation, vulnerability research, identity security, and offensive tradecraft.
• Coaching, mentorship, and career development support from experienced leaders.
• Opportunity to work alongside offensive, defensive, and threat-hunting security professionals.
• Hybrid-remote working environment supporting flexibility and work-life balance.
• Opportunity to work on challenging projects in complex and critical technology environments.
• Ability to make a meaningful and lasting impact on cybersecurity and organizational resilience.
• Opportunities to take on progressively greater responsibilities and expand your technical scope.
• Dynamic, collaborative, progressive, and high-performing team environment.
• Full-time, regular salaried position based in Toronto, Canada, with a standard 37.5-hour work week.