Information Security Specialist (Remote)

About the role

We are seeking an experienced Information Security Specialist to design and execute red‑teaming workflows for SaaS and cloud environments. This remote contract position involves hands‑on penetration testing, threat modeling, and reviewing security controls across a range of modern platforms.

Key responsibilities

• Design comprehensive red‑teaming workflows and adversarial scenarios targeting SaaS and cloud services.
• Perform hands‑on penetration testing and threat modeling on Microsoft 365, Google Workspace, Slack, GitHub, and Snowflake.
• Act as a senior reviewer, evaluating the quality and depth of red‑team deliverables.
• Identify and document AI‑related attack vectors such as prompt injection, privilege escalation, data exfiltration, and destructive actions.
• Provide practical insights for security controls, policies, and detection strategies in real‑world SaaS environments.
• Collaborate with cybersecurity teams, delivering detailed written and verbal feedback.
• Support benchmarking initiatives by creating up‑to‑date adversarial scenarios.

Required profile

• Extensive hands‑on experience in red teaming, penetration testing, application/cloud security, or security engineering.
• Deep understanding of enterprise SaaS security concepts, including identity, RBAC/permissions, and data governance.
• Direct familiarity with Microsoft 365, Google Workspace, Slack, GitHub, and Snowflake from a security perspective.
• Ability to think adversarially about AI and SaaS platform exploitation.
• Strong written and verbal communication skills for articulating complex security issues.
• Proven track record of delivering real‑world security impact.

Required skills

• Red teaming
• Penetration testing
• Threat modeling
• Microsoft 365 security
• Google Workspace security
• Slack security
• GitHub security
• Snowflake security
• AI security (prompt injection, privilege escalation)
• Identity & Access Management
• RBAC
• Data governance