Security Engineer, Product

About the role

Rogo is seeking a hands‑on offensive security practitioner to protect its AI‑driven finance platform. You will continuously test and harden products, APIs, and cloud infrastructure before adversaries can exploit them.

Key responsibilities

• Conduct continuous penetration testing, red‑team exercises, and adversarial assessments on applications, APIs, AI/ML pipelines, and cloud environments.
• Build and maintain automated security tooling that discovers, validates, and patches vulnerabilities across code, dependencies, and infrastructure as code.
• Develop custom exploit chains, attack simulations, and AI‑specific threat tests such as prompt injection and model manipulation.
• Lead purple‑team drills, collaborate on threat modeling, and translate findings into sprint‑level remediation.
• Manage relationships with external pen‑test firms and drive closure of identified issues.

Required profile

• Professional penetration‑testing experience across web apps, APIs, cloud (AWS/GCP) and preferably AI/ML systems.
• Strong programming background in a statically typed language (Rust, Go, Java, C++) and scripting (Python, Bash).
• Ability to work autonomously in a fast‑paced startup environment and collaborate effectively with engineering teams.

Required skills

• Penetration testing tools: Burp Suite, Nuclei, Semgrep, custom fuzzers.
• Cloud platforms and IaC: AWS, GCP, Terraform, Kubernetes.
• CI/CD security integration: SCA, SAST, DAST pipelines.
• Programming/scripting: Rust, Go, Java, C++, Python, Bash.
• Threat modeling, cryptography basics, and familiarity with compliance frameworks (SOC 2, ISO 27001, NIST CSF).