Senior Software Developer - Offensive AI (Global Security)

RBC; Toronto; Hybrid; CAD 90,000 - 150,000; Full time

Benefits offered by this job

Total rewards program

Training and development budget

Hybrid-remote work options

Career advancement opportunities

Collaborative security teams

Competitive compensation and stock

Job summary

RBC in Toronto Canada seeks a seasoned engineer to design and implement agentic tooling and AI-enabled workflows for Red Team operations. You will turn research prototypes into scalable services and APIs, leveraging RAG and vector search to empower operators in real time while ensuring reliability and safety through observability.

Collaboration with Red Team and Purple Team colleagues will be essential to translate findings into stronger defenses.

Qualifications

• BS degree in Computer Science or related field.

Responsibilities

• Design, build, and maintain agentic workflows and AI-enabled tooling that support Red Team operations, from reconnaissance and analysis to reporting and post-exploitation tradecraft.
• Turn operator requirements and research prototypes into production-grade services, APIs, and automation pipelines.
• Apply RAG, vector search, and retrieval-based approaches to make offensive research and operational knowledge accessible and actionable to operators in real time.
• Instrument and evaluate agentic systems using observability tooling to ensure outputs are reliable, explainable, and safe to use in live operations.
• Continuously tune and validate agent behavior against real operational use cases, iterating based on operator feedback.
• Partner directly with Red Team operators and researchers to identify where automation and AI can reduce manual effort or unlock new tradecraft.
• Support Purple Team exercises by building tooling that helps translate offensive findings into detection and defensive improvements.
• Communicate technical designs, tooling caps to Red Team leadership and other internal stakeholders.

Skills

Software development

Agentic workflows

REST APIs

Backend services

AI evaluation

Observability tooling

RAG

Vector search

Cloud platforms

CI/CD

Docker/Kubernetes

Ambiguity tolerance

Critical thinking

Education

B.S. in Computer Science or related field

Tools

LangGraph

Google ADK

OpenAI Agents SDK

LangSmith

Langfuse

Weights & Biases

FastAPI

Flask

Spring

Azure

AWS

GitHub Actions

Docker

Kubernetes

Job description

Responsibilities

• Design, build, and maintain agentic workflows and AI-enabled tooling that support Red Team operations, from reconnaissance and analysis to reporting and post-exploitation tradecraft.
• Turn operator requirements and research prototypes into production-grade services, APIs, and automation pipelines.
• Apply RAG, vector search, and retrieval-based approaches to make offensive research and operational knowledge accessible and actionable to operators in real time.
• Instrument and evaluate agentic systems using observability tooling to ensure outputs are reliable, explainable, and safe to use in live operations.
• Continuously tune and validate agent behavior against real operational use cases, iterating based on operator feedback.
• Partner directly with Red Team operators and researchers to identify where automation and AI can reduce manual effort or unlock new tradecraft.
• Support Purple Team exercises by building tooling that helps translate offensive findings into detection and defensive improvements.
• Communicate technical designs, tooling caps to Red Team leadership and other internal stakeholders.

Job Description

What will you do?

• Agentic Tooling & Platform Development
  • Design, build, and maintain agentic workflows and AI-enabled tooling that support Red Team operations, from reconnaissance and analysis to reporting and post-exploitation tradecraft.
  • Turn operator requirements and research prototypes into production-grade services, APIs, and automation pipelines.
  • Apply RAG, vector search, and retrieval-based approaches to make offensive research and operational knowledge accessible and actionable to operators in real time.
• AI Evaluation & Reliability
  • Instrument and evaluate agentic systems using observability tooling to ensure outputs are reliable, explainable, and safe to use in live operations.
  • Continuously tune and validate agent behavior against real operational use cases, iterating based on operator feedback.
• Red Team & Stakeholder Collaboration
  • Partner directly with Red Team operators and researchers to identify where automation and AI can reduce manual effort or unlock new tradecraft.
  • Support Purple Team exercises by building tooling that helps translate offensive findings into detection and defensive improvements.
  • Communicate technical designs, tooling caps to Red Team leadership and other internal stakeholders.

Must Haves

• B.S. degree in Computer Science or related field.
• 4+ years of software development experience with a strong understanding of software design patterns and architecture.
• Experience building agentic workflows or working with frameworks such as LangGraph, Google ADK, or OpenAI Agents SDK.
• Experience with AI evaluation and observability tooling such as LangSmith, Langfuse, or Weights & Biases.
• Experience with RAG, vector search, or retrieval-based AI systems.
• Comfort with cloud platforms (Azure, AWS), CICD pipelines (GitHub Actions), and containers (Docker/Kubernetes).
• Commitment to writing clean, maintainable, production-grade code.
• Experience developing backend services and REST APIs using frameworks such as FastAPI, Flask, Spring, or equivalent.
• Experience with event-driven architectures, message queues, or async workflows.
• Strong critical thinking and comfort operating with ambiguity.

Nice-to-Have

• Experience working on Red Team, penetration testing, adversary emulation, vulnerability research, or other security teams.
• Interest in ethical hacking, red teaming, malware, and offensive cyber operations.
• Offensive Security Certified Professional (OSCP), Offensive Security Certified Expert (OSCE), Offensive Security Exploit Developer (OSED), Offensive Security Exploitation Expert (OSEE), GXPN, GPEN, GWAPT, or other reputable, technical, and offensive-focused certification.
• Financial industry experience is a strong asset but not required.

What’s in it for you?

At a team level, you will have exposure to operating in complex and critical environments that power our economy. You will work with talented and driven offensive, defensive, and threat hunting security experts; refining and expanding your skillset. You will be given the opportunity to attend industry-leading public and private training sessions to take your skills to the next level.

Below is a list of training our team members attended within the past 20 months:

• AI Red Teaming by DreadNode
• Offensive Entra ID training by Dirk-jan Mollema
• Adversary Tactics: Mac Tradecraft by SpecterOps
• Adversary Tactics: Red Team Operations by SpecterOps
• Adversary Tactics: Vulnerability Research for Operators by SpecterOps
• Dark Side Ops 2: Adversary Simulation by NetSPI
• OSCP / OSED / OSMR by Offensive Security
• Many more

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients succeed and our communities prosper. We care about each other, reaching our potential, making a difference in our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable;
• Dedicated budget for annual training and conference attendance;
• Leaders who support your development through coaching, training, and managing opportunities;
• Ability to make a difference and lasting impact;
• Work in a dynamic, collaborative, progressive, and high-performing team;
• Flexible work/life balance options including a hybrid-remote working environment;
• Opportunities to do challenging work;
• Opportunities to take on progressively greater accountabilities; and
• Opportunities to build close relationships with various cyber security teams.

Job Skills

Decision Making, Group Problem Solving, Identity Access Management (IAM), Information Security, Information Technology Security, IT Systems Integration, Negotiation, Software Development, Software Development Life Cycle (SDLC)

Additional Job Details

Address: 16 YORK ST:TORONTO

City: Toronto

Country: Canada

Work hours/week: 37.5

Employment Type: Full time

Platform: TECHNOLOGY AND OPERATIONS

Job Type: Regular

Pay Type: Salaried

Posted Date: 2026-09-07

Application Deadline: 2026-09-25

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Our Employment Opportunities

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.