AI-Driven Red Team Security Engineer

Backblaze; EUA; Teletrabalho; USD 140 000 - 190 000; Tempo integral

Resumo da oferta

Backblaze, the object storage leader, is seeking a Red Team Security Engineer to continuously validate vulnerabilities and defenses against realistic adversaries. You will combine offensive security with AI-assisted techniques to test web apps, APIs, cloud infrastructure, and identity systems, translating findings into actionable improvements.

You will emplace realistic attack paths, perform purple-team exercises with Security Analytics, and help strengthen detection, telemetry, and response

Qualificações

• Experience in red teaming, penetration testing, adversary emulation, or offensive security engineering.
• Strong web, API, cloud, identity, operating-system, and network security fundamentals.
• Experience validating practical exploitability and developing realistic attack paths.
• Strong understanding of MITRE ATT&CK and modern adversary techniques.
• Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, and MITRE ATLAS.
• Scripting or software-development experience.
• Experience safely using automation or AI-assisted techniques in offensive-security workflows.

Responsabilidades

• Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents.
• Validate whether vulnerabilities and configuration weaknesses identified are reachable and practically exploitable.
• Develop and execute realistic attack paths across web applications, APIs, cloud infrastructure, identity systems, endpoints, and other enterprise services.
• Use AI-assisted and agentic techniques for reconnaissance, vulnerability analysis, attack-path discovery, and controlled offensive testing.
• Test AI applications and agents for prompt injection, tool abuse, excessive privilege, identity compromise, and other emerging attack classes.
• Validate compensating controls and mitigations before or after deployment.
• Conduct purple-team exercises with Security Analytics and Security Operations to validate telemetry, detection, and response effectiveness.
• Translate offensive findings into actionable improvements to architecture, configuration, detections, and response capabilities.

Conhecimentos

Red team / adversary emulation

Web security fundamentals

API security

Cloud security

MITRE ATT&CK knowledge

Scripting

Automation / AI-assisted testing

Ferramentas

Python

Bash

AWS

Azure

Descrição da oferta de emprego

Backblaze, the object storage leader, is seeking a Red Team Security Engineer to continuously validate vulnerabilities and defenses against realistic adversaries. You will combine offensive security with AI-assisted techniques to test web apps, APIs, cloud infrastructure, and identity systems, translating findings into actionable improvements.

You will emplace realistic attack paths, perform purple-team exercises with Security Analytics, and help strengthen detection, telemetry, and response