AI Threat Emulation Engineer

Confidential; San Francisco (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

Confidential is seeking a skilled Red Team Security Engineer to join the SOC team in San Francisco, California. The ideal candidate will simulate real-world adversary TTPs, including APT-level attacks, and will conduct research into AI and LLM security risks.

This role involves designing red team operations, collaborating with blue team members, and producing high-quality reports with actionable remediation recommendations. Candidates should have a strong background in penetration testing and familiarity with the MITRE ATT&CK framework.

Qualifications

• 3+ years of hands-on penetration testing or red team experience.
• Proficiency with at least one mainstream C2 framework.
• Understanding of AI/LLM application architectures and attack surfaces.

Responsibilities

• Design and execute end-to-end red team operations.
• Replicate APT group TTPs to validate detection and incident response capabilities.
• Research AI/LLM attack surfaces and evaluate security risks.

Skills

Penetration Testing

Red Team Operations

C2 Frameworks

Vulnerability Exploitation

MITRE ATT&CK Framework

AI Security

Web3 Security

Education

Major red team certification (e.g., OSCP, CRTO, CRTE)

Tools

Cobalt Strike

Sliver

Havoc

Job description

Confidential is seeking a skilled Red Team Security Engineer to join the SOC team in San Francisco, California. The ideal candidate will simulate real-world adversary TTPs, including APT-level attacks, and will conduct research into AI and LLM security risks.

This role involves designing red team operations, collaborating with blue team members, and producing high-quality reports with actionable remediation recommendations. Candidates should have a strong background in penetration testing and familiarity with the MITRE ATT&CK framework.