AI-Enabled Red Team Security Engineer

OpenKrill; United States; Teletrabalho; USD 180 000 - 260 000; Tempo integral

Resumo da oferta

Backblaze, the leader in object storage, seeks a Red Team Security Engineer to simulate adversaries and test defenses across web apps, APIs, cloud infra, and AI-enabled systems.

You will combine traditional offensive security with AI-assisted testing, conduct purple-team exercises, and translate findings into concrete improvements to architecture, detections, and response capabilities.

Qualificações

• Experience in red teaming, penetration testing, adversary emulation, or offensive security engineering.
• Strong web, API, cloud, identity, operating-system, and network security fundamentals.
• Experience validating practical exploitability and developing realistic attack paths.
• Strong understanding of MITRE ATT&CK and modern adversary techniques.
• Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, and MITRE ATLAS.
• Scripting or software-development experience.
• Experience safely using automation or AI-assisted techniques in offensive-security workflows.
• Experience assessing cloud-native or AI-enabled systems, conducting purple-team exercises, or simulating autonomous adversaries is preferred.

Responsabilidades

• Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents.
• Validate whether vulnerabilities and configuration weaknesses identified are reachable and practically exploitable.
• Develop and execute realistic attack paths across web applications, APIs, cloud infrastructure, identity systems, endpoints, and other enterprise services.
• Use AI-assisted and agentic techniques for reconnaissance, vulnerability analysis, attack-path discovery, and controlled offensive testing.
• Test AI applications and agents for prompt injection, tool abuse, excessive privilege, identity compromise, and other emerging attack classes.
• Validate compensating controls and mitigations before or after deployment.
• Conduct purple-team exercises with Security Analytics and Security Operations to validate telemetry, detection, and response effectiveness.
• Translate offensive findings into actionable improvements to architecture, configuration, detections, and response capabilities.

Conhecimentos

Red teaming

Penetration testing

Adversary emulation

Web security

APIs security

MITRE ATT&CK

OWASP Top 10

AI-assisted security

Scripting

Ferramentas

Python

Descrição da oferta de emprego

Backblaze, the leader in object storage, seeks a Red Team Security Engineer to simulate adversaries and test defenses across web apps, APIs, cloud infra, and AI-enabled systems.

You will combine traditional offensive security with AI-assisted testing, conduct purple-team exercises, and translate findings into concrete improvements to architecture, detections, and response capabilities.