---
title: 'Security Engineer, Offensive Security at Liftoff'
canonical: 'https://feeny.ai/job/security-engineer-offensive-security-liftoff-united-states-ktns0dxntsrn'
type: 'job'
last_seen: '2026-11-03'
---

# Security Engineer, Offensive Security at Liftoff

- **Company:** Liftoff
- **Location:** United States
- **Work type:** remote
- **Posted:** 2026-10-29
- **Last confirmed live:** 2026-11-03
- **Apply:** https://liftoff.io/job/8332736?gh_jid=8332736

## Job description

Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize revenue across programmatic and direct demand.

Liftoff’s solutions, including Accelerate, Direct, Monetize, Intelligence, and Vungle Exchange, support over 6,600 mobile businesses across 74 countries in sectors such as gaming, social, finance, ecommerce, and entertainment. Founded in 2012 and headquartered in Redwood City, CA, Liftoff has a diverse, global presence.

## About Liftoff Security Team

The Liftoff Security team protects Liftoff's customers, users, and employees. We architect Liftoff's security posture, build the tools and systems that defend it, and partner with engineering teams as they ship new products and features. Our work spans the entire stack — infrastructure, web, mobile, and IT — and we approach security from a software engineering standpoint, scaling our impact through automation and well-designed tools. As our Security Engineer, Offensive Security, you will own internal offensive testing and lead the move from point-in-time penetration tests to continuous, AI-assisted testing. You will independently plan assessments, safely validate vulnerabilities, work with engineering teams through remediation and retesting, and build sustained knowledge of our source code and systems. You will contribute across application, cloud, and infrastructure security, support Accelerate and MX as priorities change, and share the team's on-call and incident-response work.

## Responsibilities

- Independently plan and execute internal penetration tests across applications, APIs, cloud infrastructure, and corporate systems; prioritize assessments by risk and business impact.
- Define testing scope and rules of engagement with system owners, assess production risk, and choose safe methods for validating vulnerabilities.
- Combine hands-on testing with source-code review and architectural analysis to find vulnerabilities and demonstrate realistic attack paths.
- Partner with engineering teams to explain findings, agree on practical fixes, track remediation, and retest to confirm the risk is resolved.
- Maintain knowledge of Liftoff’s systems and attack surface, revisit high-risk attack paths as systems change, and turn confirmed findings into repeatable tests.
- Build testing tools and workflows that combine hands-on assessments with ongoing automated testing and remediation validation.
- Make security testing self-service where practical through reusable tests, documented assessment and retesting workflows, and clear remediation guidance.
- Support the annual third-party penetration test for independent validation and customer and audit requirements; coordinate scope and follow findings through remediation.
- Lead adoption of AI-assisted offensive security tooling: evaluate platforms and build workflows for code analysis, test generation, and finding triage; measure coverage, accuracy, and effort saved.
- Partner with Detection & Response to turn validated attack paths and offensive findings into detection improvements and incident-response exercises.
- Work across application, cloud, and infrastructure security as priorities change, including Accelerate and MX, and share the team’s on-call and incident-response rotation, including occasional off-hours response and post-incident follow-up.

## Minimum qualifications

- 5+ years of relevant security engineering experience, including substantial hands-on penetration testing of applications and infrastructure.
- Excellent judgment in prioritizing testing by risk, assessing production impact, and safely validating exploits without unnecessary disruption.
- Experience independently owning assessments and partnering with engineering teams from initial findings through remediation and retesting.
- Write production-quality code for security tools and automation, review pull requests, and navigate large, unfamiliar codebases. Develop safe proof-of-concept code and independently validate AI-generated code and findings.
- Strong understanding of application and API security, authentication and authorization, network security, and common vulnerability classes.
- Hands-on experience assessing cloud and infrastructure security, including identity and access controls, configuration, and attack paths.
- Ability to quickly understand complex systems and architecture and contribute across application, cloud, and infrastructure security.
- Practical software engineering habits: testing, observability, version control, peer code review, continuous integration, and blameless postmortems.
- Strong technical writing: clear assessment plans, proposals, reproducible findings, runbooks, and post-incident reviews that support engineering decisions. Explain exploitability and business impact clearly in writing and conversation.
- Willingness to share the security team’s on-call and incident-response responsibilities, including occasional off-hours response.

Desirable qualifications

- Experience with Go, Python, Clojure, or JavaScript; ability to work across languages matters more than a specific language.
- Experience building AI-assisted security testing workflows and measuring the accuracy and usefulness of their results.
- Experience securing large-scale cloud systems, mobile advertising, or other high-volume SaaS environments.

## Why This Role is Exciting

- Ownership & Impact: Build and own our in-house offensive security capability, from selecting assessments to confirming fixes.
- Broad Attack Surface: Test applications, APIs, cloud infrastructure, and corporate systems with access to source code and engineering context.
- Engineering Partnership: Work with teams that value security and stay involved through remediation and retesting.
- Room to Grow: Move from point-in-time penetration tests to continuous testing and lead adoption of AI-assisted offensive security tools.

Hands-On Technical Work: Investigate complex systems, validate vulnerabilities safely, and build tools that make testing more effective.

Compensation:

The following are our base salary ranges for this role:

- SF Bay Area, Los Angeles/Orange County, NYC, Seattle: $200,000 - $250,000 plus bonus
- All other cities and towns in our approved states: $184,000 - $220,000 plus bonus

## #LI-EL1

We use Covey as part of our hiring and/or promotional process for jobs in NYC and certain features may qualify it as an AEDT.  As part of the evaluation process, we provide Covey with job requirements and candidate-submitted applications. We began using [Covey Scout for Inbound](https://getcovey.com/product/covey-scout-inbound) on January 22, 2024.

Please see the independent bias audit report covering our use of Covey [here](https://getcovey.com/nyc-local-law-144). Liftoff offers a fast-paced, collaborative, and innovative work environment where employees are empowered to grow and make an impact. We’re shaping the future of the mobile app ecosystem—join us and help accelerate what’s next.

Liftoff’s compensation strategy includes competitive salaries, equity, and benefits designed to support employee well-being and performance. We benchmark compensation based on role, level, and location to ensure fairness and market alignment. Benefits may include medical coverage, wellness stipends, and additional perks based on your country of residence.

Liftoff is an equal opportunity employer. We are committed to creating an inclusive environment for all employees and applicants regardless of race, ethnicity, national origin, age, marital status, disability, sexual orientation, gender identity, religion, veteran status, or any other characteristic protected by applicable law.

Agency and Third Party Recruiter Notice:

Liftoff does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job postings. No fee will be paid to third parties who submit unsolicited candidates directly to our hiring managers or Recruiting Team. All candidates must be submitted via our Applicant Tracking System by approved Liftoff vendors who have been expressly requested to make a submission by our Recruiting Team for a specific job opening. No placement fees will be paid to any firm unless such a request has been made by the Liftoff Recruiting Team and such a candidate was submitted to the Liftoff Recruiting Team via our Applicant Tracking System.

## About Liftoff

## Company Overview
- **One-liner**: Liftoff is an AI-powered performance marketing platform that helps mobile app businesses acquire, engage, and monetize users through a full-stack growth acceleration platform.
- **Entity Type**: Public (NYSE: LFTO)
- **Headquarters**: Redwood City, California, USA
- **Founded**: 2012
- **Founders**: Not publicly listed (company was co-founded by a team; specific founder names are not disclosed on the company site)

## Core Business
- **Primary industry/industries**: Mobile advertising, performance marketing, adtech, programmatic advertising, mobile app analytics
- **Target customers**: B2B – mobile app marketers, publishers, and advertisers across gaming, social, finance, ecommerce, and entertainment sectors
- **Mission or purpose statement**: “Connect people to the mobile apps and tools they love”

## Products & Services
- **Accelerate** (SaaS): ML-powered user acquisition platform that helps advertisers attract and engage high-value users at scale.
- **Monetize** (SaaS): Revenue optimization platform for publishers to maximize earnings through premium demand and superior ad experiences.
- **Vungle Exchange** (Platform): Programmatic exchange that increases reach for performance-driven ad experiences across mobile apps.
- **Intelligence** (SaaS): Analytics suite (including GameRefinery and AppRefinery) that provides app insights to boost revenue, drive growth, and stay competitive.
- **Creative** (Service/Technology): Ad creative production and optimization using innovative strategies and first-party data.

All products are powered by **Cortex™**, Liftoff’s AI-enabled growth platform using advanced neural-network technology.

## Market Standing
- **Valuation/Market Cap**: Not disclosed in available sources (public company; refer to SEC filings for current market cap)
- **Key Metric**: Annual revenue not publicly available from search results; total funding not applicable (public company). Notable: supports over 6,600 mobile businesses across 74 countries.
- **Notable Investors/Partners**: Merged with Vungle in 2021, creating one of the world’s largest independent privacy-friendly platforms. Prior to going public, Liftoff was backed by institutional investors (specific names not listed in search results).
- **Growth Signals**: 
  - Headcount of 645 employees (235 in product + tech) as of latest data.
  - Global presence with offices in Redwood City, London, Berlin, Paris, Singapore, Beijing, Helsinki, Seoul, New York, Los Angeles.
  - Public listing (ticker LFTO) indicates maturity and market confidence.

## Competitive Advantages
- **AI-first platform**: Cortex AI is embedded in all products, using neural networks to unlock patterns from massive datasets for data-driven ROI.
- **End-to-end stack**: Covers the entire mobile app lifecycle – user acquisition, engagement, monetization, and analytics – reducing the need for multiple vendors.
- **Scale and independence**: Post-merger with Vungle, Liftoff is one of the largest independent ad platforms, with a publisher base of 100,000+ active apps and an advertiser base of 4,500+ companies.
- **Privacy-friendly**: Emphasis on privacy-compliant solutions in a rapidly changing regulatory environment.

## Strategic Focus
- Expanding AI and machine learning capabilities across all products (e.g., conversion ML, ML platform).
- Deepening global reach with hubs in key markets (APAC, EMEA, Americas).
- Continuing to integrate Vungle’s assets and drive cross-sell between Accelerate, Monetize, and Intelligence.
- Investing in creative technology and programmatic exchange growth.

## Why Work Here
- **Culture**: Emphasizes data-driven decision-making, agency and urgency, collaboration (“in this together”), and a growth mindset. Employees are encouraged to experiment and learn from failure.
- **Work environment**: Remote-first company with global hubs for purposeful in-person collaboration. Flexible remote work options available across many roles.
- **Benefits**: 
  - Unlimited time off
  - Stock options
  - 401(k) / pension plans with matching
  - Healthcare (health, dental, vision)
  - Connectivity stipend (mobile phone and home internet)
  - Lifestyle stipend (health, wellness, pet, groceries)
  - Professional development support
  - Office snacks and fun team gatherings
- **Diversity & inclusion**: Offices across 10+ locations worldwide; values diverse perspectives.

## Sources
1. [liftoff.ai](https://www.liftoff.ai/)
2. [liftoff.ai/company](https://www.liftoff.ai/company/)
3. [liftoff.ai/company/careers](https://liftoff.ai/company/careers/)
4. [liftoff.ai/company/careers/jobs](https://liftoff.ai/company/careers/jobs/)
5. [builtin.com/company/liftoff](https://builtin.com/company/liftoff)

## Other roles at Liftoff

- [Application Security Engineer, Generative AI](https://feeny.ai/job/application-security-engineer-generative-ai-liftoff-united-states-4yh9w2agq4yp) — United States
- [Lead Data Analyst](https://feeny.ai/job/lead-data-analyst-liftoff-united-states-8gf3h8n64dgw) — United States
- [Corporate Tax Manager](https://feeny.ai/job/corporate-tax-manager-liftoff-united-states-e25s87nwms9b) — United States
- [Director, Strategic Deal Finance](https://feeny.ai/job/director-strategic-deal-finance-liftoff-canada-1dyfcw2zhqqt) — Canada
- [Director, Strategic Deal Finance](https://feeny.ai/job/director-strategic-deal-finance-liftoff-united-states-g5taw96nzwtq) — United States
- [Senior Software Engineer, Infrastructure](https://feeny.ai/job/senior-software-engineer-infrastructure-liftoff-redwood-city-b2z5ag62t2cm) — Redwood City, CA
- [Manager, Technical Accounting](https://feeny.ai/job/manager-technical-accounting-liftoff-canada-x73bvycja6c6) — Canada
- [Manager, Technical Accounting](https://feeny.ai/job/manager-technical-accounting-liftoff-united-states-13pzs9jhdjrp) — United States
- [Commercial Legal Counsel (Contractor)](https://feeny.ai/job/commercial-legal-counsel-contractor-liftoff-united-kingdom-8vd69vhpfk0r) — United Kingdom
- [Staff Software Engineer](https://feeny.ai/job/staff-software-engineer-liftoff-london-vdbsgr9tjxx3) — London, United Kingdom