AI-Driven Red Team Security Engineer

Backblaze External Website; Colombia; Remote; COP 60,000,000 - 140,000,000; Full time

Job summary

Backblaze is seeking a Red Team Security Engineer to continuously validate vulnerabilities, configurations, identities, and AI-enabled systems against realistic adversaries.

The role combines offensive security with AI-assisted adversary emulation, developing exploit paths across web apps, APIs, cloud infrastructure, and endpoints while refining defensive controls and incident response.

Qualifications

• Experience in red teaming, pen testing, adversary emulation, or offensive security engineering.
• Strong web, API, cloud, identity, OS, and network security fundamentals.
• Experience validating exploitability and developing realistic attack paths.
• Strong understanding of MITRE ATT&CK and modern adversary techniques.
• Familiarity with OWASP Top 10 for LLM and Agentic Apps, and MITRE ATLAS.
• Scripting or software development experience.
• Experience with automation or AI-assisted offensive-security workflows.
• Experience assessing cloud-native or AI-enabled systems, purple-team exercises, or simulating autonomous adversaries preferred.

Responsibilities

• Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents.
• Validate whether vulnerabilities and configuration weaknesses identified are reachable and practically exploitable.
• Develop and execute realistic attack paths across web applications, APIs, cloud infrastructure, identity systems, endpoints, and other enterprise services.
• Use AI-assisted and agentic techniques for reconnaissance, vulnerability analysis, attack-path discovery, and controlled offensive testing.
• Test AI applications and agents for prompt injection, tool abuse, excessive privilege, identity compromise, and other emerging attack classes.
• Validate compensating controls and mitigations before or after deployment.
• Conduct purple-team exercises with Security Analytics and Security Operations to validate telemetry, detection, and response effectiveness.
• Translate offensive findings into actionable improvements to architecture, configuration, detections, and response capabilities.

Skills

Red teaming

Penetration testing

Adversary emulation

Offensive security

MITRE ATT&CK

OWASP Top 10

Scripting

AI-assisted security testing

Job description

Backblaze is seeking a Red Team Security Engineer to continuously validate vulnerabilities, configurations, identities, and AI-enabled systems against realistic adversaries.

The role combines offensive security with AI-assisted adversary emulation, developing exploit paths across web apps, APIs, cloud infrastructure, and endpoints while refining defensive controls and incident response.