AI-Driven Red Team Engineer (Cloud & IAM)

Whatnot; Los Angeles (CA); Remoto; USD 210.000 - 290.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health Insurance options including: M,

Work From Home Support

Home office setup allowance

Monthly cell phone/internet allowance

Wellness allowance

Childcare stipend

401k with employer match up to 4% (US)

Parental Leave

Descrizione del lavoro

Whatnot is hiring a Red Team Engineer to identify weaknesses in our infrastructure before real attackers do. You will leverage AI tools and agents to scale offensive testing across cloud, network, and CI/CD layers, building robust harnesses and reusable playbooks.

You will work with Whatnot’s security teams to emulate adversaries, craft end-to-end attack paths, and deliver actionable fixes with clear remediation steps. A strong focus on responsible testing and scale is required.

Competenze

• 3+ years in offensive security, red teaming, or penetration testing.
• Strong Python programming; you write your own tooling.
• Hands-on experience building LLM-powered workflows or agents.
• Deep knowledge in cloud security and IAM, Kubernetes, web/app exploits, CI/CD.

Mansioni

• Plan and run authorized red team operations across cloud (AWS), Kubernetes, networks, identity systems, SaaS, and internal apps with defined rules of engagement.
• Build and maintain AI-assisted testing harnesses for recon, attack-path discovery, fuzzing, and exploit validation with logging and gates.
• Use LLMs and agents to speed vulnerability research, test-case generation, code review, and reporting.
• Red team our own AI systems: prompt injection, tool abuse, data exfiltration, and supply chain risk in AI dependencies.
• Emulate adversaries using MITRE ATT&CK and ATLAS to create end-to-end attack paths.
• Run purple team exercises with detection engineering and incident response; tune detections.
• Write clear findings with reproducible steps, impact, and fixes; track remediation and retest.
• Automate regression tests to keep fixes in place and feed results to CI/CD pipelines.
• Document techniques, tooling, and lessons learned with engineering teams.

Conoscenze

Offensive security

Red team

Python programming

LLM-powered workflows

Descrizione del lavoro

Whatnot is hiring a Red Team Engineer to identify weaknesses in our infrastructure before real attackers do. You will leverage AI tools and agents to scale offensive testing across cloud, network, and CI/CD layers, building robust harnesses and reusable playbooks.

You will work with Whatnot’s security teams to emulate adversaries, craft end-to-end attack paths, and deliver actionable fixes with clear remediation steps. A strong focus on responsible testing and scale is required.