Lead IT Security AI-Redteamer

Dkbcodefactory; España; Presencial; EUR 90.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Benefits package

Descripción de la vacante

DKB Code Factory in Spain seeks a Lead IT Security AI Redteamer to strengthen our offensive security capabilities. You will lead AI-assisted red team engagements across web apps, APIs, cloud workloads, and infrastructure, delivering prioritized reports and executive summaries.

You will manage two direct reports, drive hiring, and develop the team's skills while coordinating with SOC, IT Ops, and product teams to improve security posture and governance. Excellent English communication is required.

Formación

• Hands-on red team testing across web apps, APIs and cloud environments.
• Solid knowledge of OWASP Top 10, API Top 10 and CVSS.
• Experience with AI-assisted offensive tooling or ML/NLP in workflows.
• Proficient with Burp Suite, ZAP, Nmap, Metasploit, Nessus/OpenVAS, Kali Linux.
• Cloud security knowledge (AWS) and Kubernetes/container security.
• Scripting and automation in Python/Bash; CI integration in Git/GitLab.
• Excellent written and verbal English communication.
• Experience with SIEM/OpenSearch/Grafana; finance/regulated env a plus.

Responsabilidades

• Lead and perform AI-assisted red team engagements across web apps, APIs, cloud workloads and infrastructure, and deliver prioritized technical reports and executive summaries.
• Manage and develop two direct reports, run regular 1:1s, performance reviews, and development plans; contribute to hiring and team growth.
• Provide clear remediation guidance and validate fixes, prioritizing critical and high findings.
• Configure, tune and maintain offensive tooling and develop automation playbooks that reduce manual triage and false positives.
• Coordinate integration of security checks into CI/CD pipelines and platform processes for continuous testing and attack-surface reduction.
• Lead remediation workshops and knowledge transfers, and produce reusable runbooks for product and platform teams.
• Coordinate triage with SOC, IT Ops, product teams and central IT Security, and support governance and compliance mapping (OWASP, API Security Top 10, CVSS).

Conocimientos

Red team security experience

Stakeholder management

Python Bash scripting

CI/CD security integration

English communication

AI/ML in security workflows

Security tooling (Burp/OWASP ZAP)

Cloud security (AWS)

Herramientas

Burp Suite

OWASP ZAP

Nmap

Metasploit

Nessus/OpenVAS

Kali Linux

OpenSearch

Grafana

AWS

Kubernetes

Descripción del empleo

Welcome to DKB Code Factory. We are looking for a Lead IT Security AI Redteamer to strengthen our offensive security capability in Spain.

Responsibilities

• Lead and perform AI-assisted red team engagements across web applications, APIs, cloud workloads and infrastructure, and deliver prioritized technical reports and executive summaries.
• Manage and develop two direct reports, run regular 1:1s, performance reviews, and development plans; contribute to hiring and team growth.
• Provide clear remediation guidance and validate fixes, prioritizing critical and high findings.
• Configure, tune and maintain offensive tooling and develop automation playbooks that reduce manual triage and false positives.
• Integrate recurring security checks into CI/CD pipelines and platform processes to enable continuous testing and attack‑surface reduction.
• Lead remediation workshops and knowledge transfers, and produce reusable runbooks for product and platform teams.
• Coordinate triage and handoff with SOC, IT Ops, product teams and central IT Security, and support governance and compliance mapping (OWASP, API Security Top 10, CVSS).

Qualifications

• Proven hands‑on experience in red team or offensive security testing across web apps, APIs, and cloud environments.
• Solid understanding of OWASP Top 10, API Security Top 10, CVSS, secure SDLC, and threat modeling.
• Experience with AI‑assisted offensive tooling or demonstrable integration of ML/NLP techniques into offensive workflows (e.g., Mythos, GPT Cyber).
• Strong practical experience with Burp Suite, OWASP ZAP, Nmap, Metasploit, Nessus/OpenVAS, and Kali Linux.
• Solid cloud security knowledge, particularly AWS, and experience with Kubernetes and container security.
• Scripting and automation skills (Python, Bash) and experience integrating security checks in Git/GitLab CI or equivalent CI systems.
• Strong stakeholder management skills, with the ability to engage confidently with engineering teams, senior stakeholders and leadership.
• Excellent written and verbal communication skills in English.
• Experience with SIEM/logging platforms, OpenSearch, Grafana, or production monitoring stacks; prior experience in financial services or regulated environments is a plus.

Benefits

We offer a vibrant culture with morning daily gatherings and after‑work drinks, strong team spirit, personal development support, and a comprehensive benefits package.

We encourage you to apply even if not every requirement matches. You could still be the right candidate for us.