Staff Security Engineer, Penetration Testing

About Life360

Life360’s mission is to keep people close to the ones they love. Our category-leading mobile app and Tile tracking devices empower members to protect the people, pets, and things they care about most with a range of services, including location sharing, safe driver reports, and crash detection with emergency dispatch. Life360 serves approximately 88 million monthly active users (MAU), as of June 2025 across more than 180 countries.  

Life360 delivers peace of mind and enhances everyday family life with seamless coordination for all the moments that matter, big and small. By continuing to innovate and deliver for our customers, we have become a household name and the must-have mobile-based membership for families (and those friends that basically are family).

Life360 has more than 500 (and growing!) remote-first employees. For more information, please visit life360.com.

Life360 is a Remote-First company, which means a remote work environment will be the primary experience for all employees. All positions, unless otherwise specified, can be performed remotely (within the US) regardless of any specified location above. 

About the Job

We are looking for a Staff Security Engineer, Penetration Testing, who will serve as a trusted offensive security expert at Life360. In this role, you will lead penetration testing and red team activities across our mobile applications, APIs, AWS cloud environments, and hardware devices. You will identify vulnerabilities that matter, design real-world attack simulations, and provide clear guidance to help our engineering teams close security gaps before they can be exploited.

You will bring deep expertise in offensive security and hands-on experience with penetration testing in complex environments. You know how to think like an attacker and can translate that mindset into actionable insights that strengthen defenses. You will partner closely with product, cloud, and hardware engineering teams to embed security into the design process, validate that our controls work as intended, and continuously raise the bar for tenacity across the organization.

Success in this role means you are not only finding and exploiting weaknesses but also helping Life360 build durable solutions that protect millions of families who rely on our platform. You will influence security culture, scale your impact through automation and knowledge sharing, and help us stay ahead of emerging threats with a forward-thinking, offensive lens.

Preference on the West Coast (Pacific Time Zone)

The US-based salary range for this position is $165,000-$242,500. We consider an individual’s background and experience in determining final salary; therefore, base pay offered may vary considerably depending on geographic location, job-related knowledge, skills, and experience. The compensation package includes a wide range of medical, dental, vision, financial, and other benefits, as well as equity.

What You’ll Do

• Lead penetration tests of Life360’s mobile applications, APIs, AWS environments, and hardware devices to identify and validate vulnerabilities.
• Design and execute advanced attack simulations that mirror real-world adversaries and provide actionable insights to engineering teams.
• Develop proof-of-concept exploits and technical reports that clearly communicate risk and drive remediation.
• Collaborate with product, cloud, and hardware engineers to embed security into the design and development lifecycle.
• Validate the efficiency of defensive controls and influence improvements based on offensive findings.
• Build tools, automation, and repeatable methodologies to scale penetration testing across Life360’s ecosystem.
• Mentor engineers and share offensive security knowledge to raise the bar for security awareness across the company.
• Stay ahead of emerging threats and offensive security techniques to ensure Life360 remains durable against evolving attack vectors.

What We’re Looking For

• 7+ hands-on experience in penetration testing with a focus on mobile applications, APIs, AWS cloud environments, and hardware devices.
• Deep expertise in offensive security techniques, exploit development, and red teaming.
• Proficient knowledge of common vulnerabilities, attack vectors, and frameworks such as OWASP, MITRE ATT&CK, and NIST.
• Proficiency with modern penetration testing tools and the ability to build custom scripts and exploits when needed.
• Ability to clearly communicate technical findings to both engineers and business stakeholders, translating risk into actionable outcomes.
• Experience collaborating with cross-functional teams and influencing secure design decisions.