NetSPI+Synack is a leader in offensive security, combining elite human expertise with agentic AI to help organizations identify, validate, prioritize, and remediate exploitable risk across their entire attack surface. Its platform delivers expert-validated testing in depth, continuously, or on demand, from pre-production code to live production environments, so security teams can separate vulnerability noise from real risk, including the growing threat of AI-driven attacks. With global reach and more than 13 million hours of real-world offensive testing experience, NetSPI+Synack serves many of the world's largest enterprises and government organizations with one ambition: nothing left to exploit.
We are looking for individuals with a collaborative, innovative, and customer-first mindset to join our team. Learn more about our award-winning workplace culture and get to know our A-Team at www.netspi.com/careers and www.synack.com/careers.
You'll design and ship AI agents that plan, reason, drive security tooling and surface exploitable vulnerabilities, running autonomously inside sandboxed environments. It's a hands-on senior role spanning applied AI and cybersecurity. You'll own systems end to end and raise the technical bar for the team around you.
Sounds interesting? Keep reading…
Please note: This is a remote position based in the U.S. We can only hire U.S. citizens for this position due to federal government contract requirements.
Here’s what you'll do
- Build AI agents that automate penetration testing: planning, tool use, reasoning over findings, and acting safely within scope.
- Stand up and run the sandboxed cyber-lab and range infrastructure, containerised on Kubernetes, where these agents execute offensive tooling.
- Ship features from ideation through production, including evals, guardrails and monitoring.
- Improve how our agents work: prompting, tool orchestration, evaluation, and cost.
- Lead code reviews and design sessions, and help the engineers around you grow.
- Work closely with our security researchers to translate how they hack into how our agents operate.
Here’s what you’ll need
- 7+ years of experience in software engineering.
- Proven ability to build and scale production systems
- Strong Python, polyglot codebase,
- Fluent or willing to learn Go
- Experience building LLMs an agentic frameworks leveraging tools like RAG, MCP- from dev environment to production
- Demonstrate ability to create reliable agents (prompting, evaluation, guardrails, understanding of token and cost optimization
- Capable leveraging Docker, Kubernetes, isolated sandbox, cloud experience GCP preferred
- Brings a disciplined testing approach to microservices gPRC, API design, async messaging (Pub/Sub, Kafka)
- Passionate desire to understand how systems get compromised
- Clear communication
- Collaborative ability to partner across teams
Nice To Have
- Experience in a fast-paced startup environment.
- Experience in Cyber Security.
Ready to join us?
Synack is committed to embracing diversity. Our people are our strength. Each addition to our team is an opportunity to grow and diversify our ideas, experiences, and viewpoints. We strive to be inclusive of Race, Ethnicity, Religion, Sex, LGBTQ+, Veterans, Disabilities, and Age. Synack welcomes you!
As a candidate, Synack cares about your privacy. Please view our candidate privacy policy.
This position has responsibility to ensure Synack’s security and privacy posture is maintained.
$145,000 - $250,000 Salary is determined by a combination of factors including location, level, relevant experience, and skills. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. The compensation package for this position may also include equity, and benefits.
For more details about our benefits, please see our benefits overview. Then for the Employer code, enter: synack
