Remote Red Team Security Engineer AI Adversary Emulation

VulnU; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Paid parental leave

Flexible PTO

Equity

Home-office stipend

Job summary

Backblaze is seeking a Red Team Security Engineer to join our remote security team. You will simulate external attackers and adversaries, validate exploitability of findings, and craft realistic attack paths across web apps, APIs, cloud infrastructure, and identities.

You will use AI-assisted techniques for reconnaissance, testing, and defense validation, contributing to architecture, detections, and responses. Remote-friendly work with emphasis on secure, scalable offense.

Qualifications

• Experience in red teaming, penetration testing, adversary emulation, or offensive security engineering.
• Strong web, API, cloud, identity, operating-system, and network security fundamentals.
• Experience validating practical exploitability and developing realistic attack paths.
• Strong understanding of MITRE ATT&CK and modern adversary techniques.
• Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, and MITRE ATLAS.
• Scripting or software-development experience.
• Experience safely using automation or AI-assisted techniques in offensive-security workflows.
• Experience assessing cloud-native or AI-enabled systems, conducting purple-team exercises, or simulating autonomous adversaries is preferred.

Responsibilities

• Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents.
• Validate whether vulnerabilities and configuration weaknesses identified are reachable and practically exploitable.
• Develop and execute realistic attack paths across web applications, APIs, cloud infrastructure, identity systems, endpoints, and other enterprise services.
• Use AI-assisted and agentic techniques for reconnaissance, vulnerability analysis, attack-path discovery, and controlled offensive testing.
• Test AI applications and agents for prompt injection, tool abuse, excessive privilege, identity compromise, and other emerging attack classes.
• Validate compensating controls and mitigations before or after deployment.
• Conduct purple-team exercises with Security Analytics and Security Operations to validate telemetry, detection, and response effectiveness.
• Translate offensive findings into actionable improvements to architecture, configuration, detections, and response capabilities.

Skills

Red team operations

Penetration testing

Adversary emulation

Threat modeling

Cloud security

Scripting

Tools

Python

PowerShell

AWS/Azure

Job description

Backblaze is seeking a Red Team Security Engineer to join our remote security team. You will simulate external attackers and adversaries, validate exploitability of findings, and craft realistic attack paths across web apps, APIs, cloud infrastructure, and identities.

You will use AI-assisted techniques for reconnaissance, testing, and defense validation, contributing to architecture, detections, and responses. Remote-friendly work with emphasis on secure, scalable offense.