Senior Adversary Emulation Engineer

Unity; San Francisco (CA); On-site; USD 160,000 - 305,000; Full time

Benefits offered by this job

Health insurance

Equity program

Generous vacation & personal days

Commuter subsidy

Job summary

Unity seeks a senior offensive security engineer to plan and execute red team campaigns across our cloud, developer tools, and production environments. You will help engineers understand attacker tradeoffs and drive fixes with measurable impact.

You will collaborate with Product Security, Infrastructure Security, Security Operations, and engineering teams to build scalable tooling and automation, turning findings into continuous security checks across Unity's platform.

Qualifications

• 6+ years in offensive security (red teaming, penetration testing, purple teaming, or vulnerability research).
• Hands-on experience attacking cloud environments (GCP, AWS, or Azure), including identity, Kubernetes and containers, and CI/CD.
• Strong web application and API security testing skills, with the ability to find logic flaws, not just scanner results.
• Solid scripting or programming ability (e.g., Python, Go, or C/C++) to build tools and exploits.
• Experience running adversary emulation or red team operations against realistic objectives, and working with defenders in purple team exercises.
• Clear written and verbal communication to explain technical risk to engineers and non-technical leaders.

Responsibilities

• Plan and run adversary emulation or red team operations across Unity's cloud, corporate, and production environments.

Skills

Offensive security

Cloud security

Web app security

Python/Go/C/C++

Red team operations

Communication

Tools

GCP

AWS

Azure

Kubernetes

CI/CD

Job description

Unity seeks a senior offensive security engineer to plan and execute red team campaigns across our cloud, developer tools, and production environments. You will help engineers understand attacker tradeoffs and drive fixes with measurable impact.

You will collaborate with Product Security, Infrastructure Security, Security Operations, and engineering teams to build scalable tooling and automation, turning findings into continuous security checks across Unity's platform.