Security Engineer, Offensive Security

About the role

Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize revenue across programmatic and direct demand.

Liftoff’s solutions, including Accelerate, Direct, Monetize, Intelligence, and Vungle Exchange, support over 6,600 mobile businesses across 74 countries in sectors such as gaming, social, finance, ecommerce, and entertainment. Founded in 2012 and headquartered in Redwood City, CA, Liftoff has a diverse, global presence.

About Liftoff Security Team

The Liftoff Security team protects Liftoff's customers, users, and employees. We architect Liftoff's security posture, build the tools and systems that defend it, and partner with engineering teams as they ship new products and features. Our work spans the entire stack — infrastructure, web, mobile, and IT — and we approach security from a software engineering standpoint, scaling our impact through automation and well-designed tools. As our Security Engineer, Offensive Security, you will own internal offensive testing and lead the move from point-in-time penetration tests to continuous, AI-assisted testing. You will independently plan assessments, safely validate vulnerabilities, work with engineering teams through remediation and retesting, and build sustained knowledge of our source code and systems. You will contribute across application, cloud, and infrastructure security, support Accelerate and MX as priorities change, and share the team's on-call and incident-response work.

Responsibilities

- Independently plan and execute internal penetration tests across applications, APIs, cloud infrastructure, and corporate systems; prioritize assessments by risk and business impact.

- Define testing scope and rules of engagement with system owners, assess production risk, and choose safe methods for validating vulnerabilities.

- Combine hands-on testing with source-code review and architectural analysis to find vulnerabilities and demonstrate realistic attack paths.

- Partner with engineering teams to explain findings, agree on practical fixes, track remediation, and retest to confirm the risk is resolved.

- Maintain knowledge of Liftoff’s systems and attack surface, revisit high-risk attack paths as systems change, and turn confirmed findings into repeatable tests.

- Build testing tools and workflows that combine hands-on assessments with ongoing automated testing and remediation validation.

- Make security testing self-service where practical through reusable tests, documented assessment and retesting workflows, and clear remediation guidance.

- Support the annual third-party penetration test for independent validation and customer and audit requirements; coordinate scope and follow findings through remediation.

- Lead adoption of AI-assisted offensive security tooling: evaluate platforms and build workflows for code analysis, test generation, and finding triage; measure coverage, accuracy, and effort saved.