Red Team Engineer – AI, Offensive Security

Jobtailor; Zürich; Vor Ort; CHF 120.000 - 180.000; Vollzeit

Zusammenfassung

Jobtailor in Zurich, Switzerland seeks an experienced security professional to lead offensive security initiatives, including red team engagements and AI-assisted testing.

You will test applications, cloud, and critical systems, and work with blue teams to enhance detection and response. Strong communication and cross-team collaboration are essential.

Qualifikationen

• Hands-on experience in penetration testing or red teaming.
• Proven skills across multiple areas such as web/app testing, network/infrastructure, cloud, AI, AD/Identity, or social engineering.
• Experience with offensive tooling and frameworks; familiarity with MITRE ATT&CK.
• Scripting and exploit development experience (Python/PowerShell/Golang).
• Understanding AI in offensive security and related attack surfaces.

Aufgaben

• Plan and execute penetration tests and red team engagements.
• Develop AI-assisted penetration testing methods and tooling.
• Test AI platforms for prompt injection and data abuse.
• Collaborate with blue team to optimize detections and run adversary emulation.
• Document findings, prioritize by risk, and drive remediation across teams.
• Support incident handling and root-cause analysis where needed.
• Embed offensive testing into the security lifecycle with cross-team collaboration.

Kenntnisse

Penetration Testing

Red Teaming

AI-Assisted Security

Offensive Security Certifications

Scripting

Exploit Development

Web & App Testing

Cloud Security

Communication

Team Collaboration

Ausbildung

OSCP

OSEP

CRTO

CRTP

GPEN

Tools

Metasploit

Burp Suite

Jobbeschreibung

• Help mature and expand our red teaming capabilities, contributing to methodology, rules of engagement, tooling and reporting


• Plan and execute penetration tests and red team engagements against applications, cloud services, infrastructure and critical systems


• Develop and apply AI-assisted penetration testing using AI to accelerate reconnaissance, exploitation, payload generation and reporting across the engagement lifecycle


• Test the security of our internal AI platforms, including prompt injection, model abuse, data exfiltration and other AI-specific attack techniques


• Work with the blue team to optimise detection and response, feeding real attack scenarios we were able to exploit into new detections; run adversary emulation and purple team exercises to validate detection and response capabilities


• Document findings clearly, prioritise by risk and drive remediation with the affected teams; contribute to security standards, KPIs and reporting


• Support incident handling and root-cause analysis where offensive security expertise adds value


• Work closely with infrastructure, development, operations, governance and risk teams to embed offensive testing into the wider security lifecycle

Requirements

• Several years of hands-on experience in penetration testing, red teaming or offensive security


• Proven penetration testing skills across at least two areas such as web and application testing, network and infrastructure, cloud (Azure / M365), AI, Active Directory / identity, or social engineering


• Practical experience with offensive tooling and frameworks such as Metasploit, Burp Suite or comparable, and familiarity with MITRE ATT&CK


• Experience with scripting and exploit development, for example Python, PowerShell, Golang or similar


• Solid understanding of how to use AI in offensive security and awareness of AI-specific attack surfaces (e.g. prompt injection, model and data abuse); knowledge of common frameworks such as OWASP, MITRE ATT&CK or NIST


• Structured, reliable and solution-oriented way of working


• Strong communication skills and the ability to make technical findings understandable and actionable for technical and non-technical audiences


• Very good English skills; German is an advantage


• Willingness to participate in 24/7 on-call duty


• Nice to Have: Experience in regulated environments or financial services


• Offensive security certifications such as OSCP, OSEP, CRTO, CRTP or GPEN

Core Competencies

Demonstrates expertise in penetration testing and red teaming, with a strong focus on AI-assisted security techniques and collaboration with blue teams to enhance detection and response capabilities. Proficient in offensive security methodologies and frameworks, with a commitment to clear documentation and risk prioritization.

Highest-signal resume keywords

• Penetration Testing


• Red Teaming


• AI-Assisted Security


• Offensive Security Certifications


• Offensive Tooling and Frameworks

ATS Optimization Keywords

Hard Skills

• Penetration Testing


• Red Teaming


• Scripting


• Exploit Development


• AI-Specific Attack Techniques


• Web and Application Testing


• Network and Infrastructure Testing


• Cloud Security (Azure / M365)


• Active Directory / Identity Testing


• Social Engineering

Soft Skills

• Strong Communication Skills


• Solution-Oriented Working
  
• Ability to Simplify Technical Findings

Certifications & Qualifications

• OSCP


• OSEP


• CRTO


• CRTP


• GPEN

Industry Keywords

• Offensive Security


• Incident Handling


• Root-Cause Analysis


• Regulated Environments


• Financial Services

Tools & Technologies

• Metasploit


• Burp Suite
  
• MITRE ATT&CK
  
• OWASP


• NIST