AI-Driven Red Team Lead - Cloud & API Security

DKB Code Factory GmbH; España; Presencial; EUR 110.000 - 170.000; Jornada completa

Descripción de la vacante

Code Factory Spain seeks a Lead IT Security AI Red Teamer to direct offensive security across APIs, cloud platforms, and internal systems, using AI-driven methods to reduce attack surface for strategic banking products. You will coach two direct reports, perform 1:1s and development plans, and provide remediation guidance with prioritized reports.

Build automation playbooks, integrate security checks into CI/CD, and coordinate with SOC and engineering teams for governance.

Formación

• Proven hands-on red team/offensive security testing across web apps, APIs, and cloud environments.
• Solid understanding of OWASP Top 10, API Security Top 10, CVSS, secure SDLC, threat modeling.
• Experience with AI-assisted offensive tooling or ML/NLP integration into offensive workflows (e.g., Mythos, GPT Cyber).
• Strong practical experience with Burp Suite, OWASP ZAP, Nmap, Metasploit, Nessus/OpenVAS, Kali Linux.
• Solid cloud security knowledge, especially AWS, plus Kubernetes/container security.
• Scripting and automation skills (Python, Bash) and integrating security checks in Git/GitLab CI or similar CI.

Responsabilidades

• Lead and perform AI-assisted red team engagements across web apps, APIs, cloud workloads and infrastructure, delivering prioritized reports and executive summaries.
• Manage and develop two direct reports, conduct 1:1s, performance reviews, and development plans; contribute to hiring.
• Provide remediation guidance and validate fixes, prioritizing critical/high findings.
• Configure, tune and maintain offensive tooling; develop automation playbooks to reduce manual triage.
• Integrate recurring security checks into CI/CD pipelines and platform processes for continuous testing.
• Lead remediation workshops and knowledge transfers, producing reusable runbooks for product and platform teams.
• Coordinate triage with SOC, IT Ops, product teams and central IT Security, supporting governance and compliance mapping (OWASP, API Security Top 10, CVSS).

Conocimientos

Red team testing

API security

AWS cloud security

Kubernetes security

Python scripting

CI/CD security integration

Stakeholder management

English communication

Threat modeling

Herramientas

Burp Suite

OWASP ZAP

Nmap

Metasploit

Nessus/OpenVAS

Kali Linux

Descripción del empleo

Code Factory Spain seeks a Lead IT Security AI Red Teamer to direct offensive security across APIs, cloud platforms, and internal systems, using AI-driven methods to reduce attack surface for strategic banking products. You will coach two direct reports, perform 1:1s and development plans, and provide remediation guidance with prioritized reports.

Build automation playbooks, integrate security checks into CI/CD, and coordinate with SOC and engineering teams for governance.