Red Team Security Engineer

Role overview

Test how effectively an organization’s systems withstand realistic attacks, spanning applications, infrastructure, identities, and AI-enabled services. The role combines red teaming and adversary emulation with controlled use of automation and AI techniques. Findings should lead to practical improvements in system design, security controls, detection, and response.

Responsibilities - Simulate threats from external attackers, malicious insiders, compromised identities, and autonomous adversarial agents. - Verify whether reported vulnerabilities and configuration weaknesses are reachable and exploitable. - Build and execute realistic attack paths across web applications, APIs, cloud infrastructure, identity services, endpoints, and other enterprise systems. - Apply AI-assisted techniques to reconnaissance, vulnerability analysis, attack-path discovery, and controlled testing. - Assess AI applications and agents for risks such as prompt injection, misuse of tools, excessive permissions, and identity compromise. - Test mitigations and compensating controls, and run purple-team exercises with security analytics and operations teams to assess detection and response. - Turn exercise results into specific improvements to architecture, configuration, monitoring, and response procedures.

Requirements - Experience in red teaming, penetration testing, adversary emulation, or offensive security engineering. - Strong security fundamentals across web applications, APIs, cloud, identity, operating systems, and networks. - Experience validating practical exploitability and constructing realistic attack paths. - Strong knowledge of MITRE ATT&CK and current adversary techniques. - Scripting or software development experience, and the ability to use automation or AI techniques safely in security work. - Familiarity with security guidance for large language model and agentic applications, and MITRE ATLAS.

Nice to have

Experience assessing cloud-native or AI-enabled systems, running purple-team exercises, or simulating autonomous adversaries.