Principal Offensive Security Engineer

Alteryx, Inc.; Irvine (CA); On-site; USD 183,000 - 200,000; Full time

Benefits offered by this job

Medical benefits

Retirement plan

Time off

Job summary

Alteryx, Inc. is seeking a Principal Offensive Security Engineer in the United States. You will lead risk-prioritized pentesting, red-team engagements, and adversary simulations across product and enterprise environments.

A hands-on role with AI-enabled testing and mentoring responsibilities. You will partner with Security Operations, Detection Engineering, Incident Response, Application Security, Cloud Security, IT, and Engineering to validate defenses and improve detection, response, and

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or related field, or equivalent experience.
• 8+ years of information security experience with hands-on pentesting, red teaming, or offensive security.
• Experience leading complex penetration tests or offensive security engagements.
• Deep hands-on expertise in application/API exploitation, cloud offensive security, identity, or enterprise environments.

Responsibilities

• Lead risk-prioritized penetration testing and offensive security assessments across products, web apps, APIs, infrastructure, cloud, identity, SaaS, and enterprise tech.
• Identify, validate, and safely exploit vulnerabilities and demonstrate how weaknesses can be chained into realistic attack paths.
• Scope, design, and execute red-team campaigns and adversary simulations based on threats and business risk.
• Develop, validate, and incorporate AI-assisted workflows into offensive security activities.
• Develop custom scripts, tooling, payloads, and automation to support engagements.
• Conduct offensive security and red-team assessments focusing on GCP and modern identity platforms, extending to AWS, Azure, and Kubernetes.

Skills

Penetration testing

Red teaming

Adversary simulation

Cloud security

Python

PowerShell

GCP

AWS

Azure

MITRE ATT&CK

AI in security

Education

Bachelor’s degree in Computer Science / Cybersecurity

Tools

AI tooling frameworks

Red-team tooling

Security tooling frameworks

Job description

Meet the Moment with Alteryx We're living through a once-in-a-generation shift in how work gets done. Data, automation, and AI are quickly becoming the center of every business decision - and Alteryx is leading the transformation. You'll be working on the challenges that sit at the heart of modern business. No matter your role, the work you do will help organizations move faster, see more clearly, and tackle questions that used to feel impossible. If you're ready to meet the moment with innovation, curiosity, and excellence, there's a place for you here.

Principal Offensive Security Engineer

Alteryx is searching for a Principal Offensive Security Engineer in the United States. Join a team that values diverse perspectives, technical curiosity, and collaboration to improve the security of our products and enterprise environments.

Position Overview

As a Principal Offensive Security Engineer, you will serve as a senior technical leader within Alteryx’s Offensive Security program. You will lead risk-prioritized penetration testing, red-team engagements, and adversary simulations across product and enterprise environments. This is a highly hands‑on role. You will personally scope and execute complex engagements while setting technical direction, improving testing methods, and mentoring other practitioners. A key focus of this role will be the practical use of artificial intelligence in offensive security. You will develop and evaluate AI‑assisted workflows that improve offensive testing and operational effectiveness. You will also partner closely with Security Operations, Detection Engineering, Incident Response, Application Security, Cloud Security, IT, and Engineering to validate defensive controls and improve Alteryx’s ability to detect and respond to realistic adversary behavior.

Primary Responsibilities

• Lead risk-prioritized penetration testing and offensive security assessments across products, web applications, APIs, infrastructure, cloud, identity, SaaS, and enterprise technologies.
• Identify, validate, and safely exploit vulnerabilities and demonstrate how weaknesses can be chained into realistic attack paths.
• Scope, design, and execute red-team campaigns and adversary simulations based on relevant threats, emerging techniques, and business risk.
• Develop, validate, and incorporate AI‑assisted workflows into offensive security activities, such as reconnaissance, campaign development, social engineering, tooling, and analysis.
• Develop custom scripts, tooling, payloads, and automation to support offensive security engagements.
• Conduct offensive security and red-team assessments with a primary focus on GCP and modern identity platforms, extending testing to AWS, Azure, and Kubernetes as relevant.
• Partner with SOC, Detection Engineering, Threat Hunting, and Incident Response teams to plan and execute purple‑team exercises that validate telemetry, detections, investigation workflows, and response capabilities.
• Partner with engineering and defensive teams to prioritize remediation, retest fixes, and verify improvements to detections, logging, monitoring, playbooks, and defensive controls.
• Clearly document findings, attack paths, business impact, and recommended remediation, and communicate results to both technical and executive audiences.
• Own the technical direction and execution of the offensive security roadmap in partnership with security leadership.
• Mature testing methodologies and provide hands‑on mentorship and technical pairing to other offensive security practitioners.
• Measure program effectiveness through verified remediation, reduced exposure to critical attack paths, and repeatable validation of detection and response coverage.

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent experience.
• 8+ years of relevant information security experience, including significant hands‑on experience in penetration testing, red teaming, adversary simulation, or offensive security.
• Demonstrated experience independently leading complex penetration tests or offensive security engagements.
• Deep hands‑on expertise in one or more core domains, such as application/API exploitation, cloud offensive security, identity, or enterprise environments, with practical working knowledge across other domains and the ability to chain weaknesses into realistic attack paths and assess business impact.
• Strong knowledge of attacker techniques across initial access, credential access, privilege escalation, persistence, lateral movement, defense evasion, and data access.
• Hands‑on offensive security experience in at least one major cloud platform (GCP, AWS, or Azure) and modern identity environments, including technologies such as Active Directory, SAML, OAuth, OIDC, MFA, and SSO.
• Experience with modern offensive security tooling and frameworks across web, identity, network, and adversary‑emulation testing.
• Ability to develop or modify offensive security tooling using languages such as Python, PowerShell, Bash, Go, or similar.
• Demonstrated hands‑on experience incorporating AI into offensive security or red‑team operations, with concrete examples of workflows or tools you developed or adapted, how you validated the results, and the operational benefits achieved.
• Demonstrated experience planning or leading purple‑team exercises and translating offensive findings into defensive improvements.
• Strong understanding of MITRE ATT&CK and the ability to map offensive activity to adversary techniques and defensive coverage.
• Excellent written and verbal communication skills, including the ability to communicate technical risk to engineering teams, security leadership, and executives.
• Demonstrated experience mentoring offensive security engineers, setting technical direction, and influencing outcomes across engineering and security teams.

Preferred Qualifications

• Contributions to the offensive security or AI security community through conference presentations, open-source tooling, published research, vulnerability disclosures, or participation in industry working groups.
• Experience building or maturing an internal red‑team or offensive security program.
• Experience conducting advanced adversary‑emulation or assumed‑breach exercises.
• Experience building AI integrations using agent frameworks, LLM APIs, or local or hosted models.
• Experience assessing AI-enabled applications, LLM-integrated systems, or agentic workflows.
• Additional depth in SaaS security, endpoint/EDR evasion, exploit development, or social engineering.
• Experience designing repeatable purple‑team validation programs.
• Strong hands‑on offensive security experience in GCP; experience assessing Kubernetes environments is also preferred.
• Relevant practical offensive security certifications such as OSCP, OSEP, OSWE, OSED, CRTO, GXPN, or comparable certifications.

Benefits & Perks

• Alteryx is committed to fair, equitable, and transparent compensation. Final compensation will be determined by various factors such as your relevant work experience, education, certifications, skills, and geographic location. The salary range for this role in the United States is $183,000 - $200,000.
• Employees may also be eligible for a wide range of other benefits, such as a bonus or commission, medical, retirement, financial, wellness, time off, employee discounts, and others.
• Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Alteryx will consider for employment qualified applicants with arrest and conviction records.
• This position involves access to software/technology that is subject to U.S. export controls. Any job offer made will be contingent upon the applicant’s capacity to serve in compliance with U.S. export controls.
• If you require reasonable accommodation as part of the recruiting process, please contact [e-mail].
• Alteryx, Inc. is an Equal Employment Opportunity Employer.

Who We Are

Alteryx is a leading AI‑ready data and analytics company that powers actionable insights to help organizations drive smarter, faster decisions with AI‑ready data. More than 8,000 customers around the world rely on Alteryx to automate analytics, improve revenue performance, manage costs, and mitigate risk across their businesses.