Security Engineer - Penetration Tester (Red Team)

We're building our security function from the ground up, and this is the first dedicated security hire. You'll own the penetration testing practice across our product suite and work directly with the Head of Engineering to shape how the security team grows. This role has a clear path to leading the team.

This isn't a role where you run scans and file tickets. You're the person who defines what security looks like at Jubelio. You'll have direct influence on team structure, tooling choices, and long-term strategy — with a real path to becoming Security Lead as the team grows.

You'll be conducting regular security assessments across our core products:

• Jubelio Omnichannel — multi-tenant e-commerce platform
• Jubelio Store — storefront product
• Jubelio Shipment — logistics and courier integration layer
• Jubelio Chat — AI-powered merchant chatbot (includes LLM components)
• Jubelio POS — point of sale system

These are production SaaS products with real merchant and transaction. The bar is high.

Job Description:

• Plan and execute routine penetration tests across all Jubelio products — web, API, and mobile surfaces
• Identify vulnerabilities, document findings, and work with engineering teams to validate and remediate
• Develop and maintain a structured pentest schedule and methodology across product lines
• Perform threat modeling to prioritize attack surfaces that matter most for our business context
• Produce clear, actionable pentest reports for both technical and non-technical audiences
• Work with the Head of Engineering to define the security roadmap, team structure, and hiring plan as the team grows
• Establish security standards, tooling, and processes that will serve as the foundation for the team