AI-Driven Adversary Emulation Engineer

Artemis Security; New York (NY); On-site; USD 180,000 - 220,000; Full time

Job summary

Artemis Security is seeking a skilled cybersecurity researcher to advance adversary emulation, detect and investigate multi-stage attacks, and research AI and data-plane threats. You will build scalable testing, validate detections end-to-end, and enable safe customer testing in controlled environments.

We value experience in offensive security, Python proficiency, cloud/identity expertise, and strong communication.

Qualifications

• 5+ years in cybersecurity with offensive security, red teaming, adversary emulation, or security research.
• Strong Python skills and a track record building reusable security tools with APIs.
• Deep practical expertise in at least one cloud or identity ecosystem.
• Practical web/API security knowledge and experience chaining weaknesses across authorization boundaries.
• Experience reproducing attacks in controlled environments and linking to logs, detection, and investigation.
• Experience assessing AI applications or offensive research into these systems.
• Clear communication and ability to own work from research through implementation.
• Sound judgment in sensitive environments: define scope, limit impact, protect data, verify cleanup.

Responsibilities

• Build scalable adversary emulation – Develop reusable scenarios and automation across cloud, identity, endpoint, SaaS, AI, and data environments.
• Validate detections end to end – Trace emulated activity through collection, normalization, enrichment, detection, and investigation.
• Research attacks against AI systems – Investigate prompt injection, MCP and tool abuse, retrieval poisoning, excess privileges.
• Research attacks against data planes – Explore abuse of service identities, tokens, permissions, and data access.
• Reproduce emerging exploits – Assess disclosures and translate findings into detection hypotheses and emulations.
• Enable safe testing in customer environments – Build authorized emulations with scope, preflight checks, and cleanup.
• Build continuous validation – Integrate scenarios with detector tests and engineering workflows.
• Turn research into defensive improvements – Contribute detections, hunt logic, telemetry, and regression tests.
• Partner with SOC and customers – Run purple-team exercises and provide evidence to investigators.

Skills

Python

Cloud/Identity

Web/API security

Communication

Ownership

Job description

Artemis Security is seeking a skilled cybersecurity researcher to advance adversary emulation, detect and investigate multi-stage attacks, and research AI and data-plane threats. You will build scalable testing, validate detections end-to-end, and enable safe customer testing in controlled environments.

We value experience in offensive security, Python proficiency, cloud/identity expertise, and strong communication.