Remote Red Team Engineer: AI-Driven Offensive Security

Whatnot; Seattle (WA); Remoto; USD 210.000 - 290.000; Tempo pieno

Vantaggi offerti da questo lavoro

Generous Holiday and Time off Policy

Health Insurance options including Med

Work From Home Support

Home office setup allowance

Monthly allowance for cell phone and

Internet

Care benefits - wellness monthly

Annual childcare allowance

Lifetime family planning benefit

401k with employer match up to 4%

Pension plans internationally

Dogfooding budget

Parental Leave - 16 weeks paid

Descrizione del lavoro

Whatnot is seeking a Red Team Engineer to identify and remediate security weaknesses across cloud, networks, and applications. You will build AI-assisted testing harnesses and agent workflows, using MITRE ATT&CK/ATLAS to simulate end-to-end attack paths and coordinate with purple/blue teams.

You’ll leverage Python tooling, drive offensive security across production-adjacent systems, and communicate findings clearly to engineers and executives alike.

Competenze

• 3+ years in offensive security, red teaming, or penetration testing with real engagements against production-scale environments.
• You write your own tooling in Python rather than only running existing utilities.
• Hands-on experience building LLM-powered workflows or agents (tool use, orchestration, evaluation, guardrails).
• Deep knowledge of at least two areas: cloud security and IAM/identity attacks, Kubernetes or container escapes, web/API exploitation, CI/CD and supply chain attacks.
• Working knowledge of AI-specific risks: prompt injection, insecure tool use, data leakage, excessive agent permissions, model supply chain issues.
• Sound judgment on scope, safety, and blast radius; test production-adjacent systems without outages.
• Clear written communication: produce actionable reports for engineers and skimmable summaries for executives.

Mansioni

• Plan and run authorized red team operations across cloud (AWS), Kubernetes, networks, and internal apps.
• Build and maintain AI-assisted testing harnesses and agent loops with logging and gates.
• Use AI tools to speed vulnerability research, payload and test-case generation, and code review.
• Emulate adversaries using MITRE ATT&CK and ATLAS to create end-to-end attack paths.
• Run purple team exercises with detection engineering and incident response; tune detections.
• Write clear findings with reproduction steps, impact, and fixes; track remediation and retest.
• Automate regression tests to keep fixes in place and feed results into CI/CD.
• Share techniques and lessons learned with engineering teams; collaborate with Blue Team.

Conoscenze

Python programming

Offensive security

Red teaming

LLM-powered workflows

Clear written communication

Descrizione del lavoro

Whatnot is seeking a Red Team Engineer to identify and remediate security weaknesses across cloud, networks, and applications. You will build AI-assisted testing harnesses and agent workflows, using MITRE ATT&CK/ATLAS to simulate end-to-end attack paths and coordinate with purple/blue teams.

You’ll leverage Python tooling, drive offensive security across production-adjacent systems, and communicate findings clearly to engineers and executives alike.