Security Engineer

About us

Cybersecurity is becoming the foundation of how every business operates, and AI is rewriting the rules for both attackers and defenders. Most companies aren’t ready.

InfoSec Group exists to change that. We combine hands-on security services (penetration testing, GRC advisory, security assessments) with AI-driven products we build ourselves. Services keep us close to real problems, and products let us solve them at scale. We’re early, which means the people who join now shape what we become.

The role

We believe AI has changed what one engineer can do. The old split between the roles no longer makes sense when someone can break a system in the morning and ship a tool to automate that attack in the afternoon.

You’ll do both. You’ll run real penetration tests for real clients, then turn what you learn into tooling, agents, and products that make our whole team faster.

What you’ll do

• Perform penetration tests across web apps, APIs, cloud, and infrastructure (mobile is a plus)
• Build AI-driven security tooling: agents, automation, scanners, and internal platforms
• Turn repeatable pentest work into reusable products and workflows
• Use AI daily to move faster: recon, analysis, exploit development, reporting, code
• Write clear findings and reports that clients can act on
• Contribute to our product roadmap with what you see in the field
• Share knowledge with the team and the wider community

You are

• A builder and a breaker. You’re equally at home in Burp Suite and in a code editor.
• AI-native: you use LLMs and agents as part of how you work, and you know where they fail
• Curious, self-driven, and fast to learn new tools, stacks, and attack techniques
• Strong in at least one programming language (Python, Go, Rust, or TypeScript are all welcome)
• Solid on fundamentals: OWASP Top 10, authentication and authorization flaws, cloud misconfigurations, common attack paths

Nice to have

• Certifications such as OSCP, OSWE, or similar, though proven skill matters more
• Bug bounty, CTF, or public vulnerability disclosures
• Experience with cloud (AWS, Azure, GCP) and CI/CD security
• Contributions to open-source security tools
• Experience building LLM-powered agents or applications, including testing them for prompt injection and related risks

What you get

• Work on real engagements and real products, side by side
• Access to leading technology and a well-connected cybersecurity community
• Freedom to experiment with AI and put what works into production
• Direct mentorship from senior security leaders
• A real chance to shape a one-of-a-kind company from the start

How to apply

• Your GitHub profile, with at least 2-3 projects, tools, or scripts you’ve written. Security tools, automations, and AI projects are especially welcome.
• Your bugbounty/training paltforms profiles- Anything from ctf time, tryhackme, hack the box, bugcrowd or hackerone would work.
• One example of your work. Pick one: a write-up of a vulnerability you found, a CTF or bug bounty report, or a short walkthrough of how you’d test a specific application.
• One AI example. Show us something you built or did with AI that you’re proud of: a tool, an agent, a workflow, or how you used AI on a real security problem.
• A few lines on who you are and what you want to grow into.
• Empty applications through LinkedIn will be ignored. If you’re reading this, you’ve made it to the end, so follow the instructions. We only review applicants who email us the above.