Senior AI‑Driven Offensive Security Engineer

Alteryx Inc.; United States; Remote; USD 183,000 - 200,000; Full time

Job summary

Alteryx, Inc. is seeking a Principal Offensive Security Engineer in the United States to lead risk-prioritized testing and red-team engagements across product and enterprise environments.

This highly hands-on role focuses on AI-assisted workflows, mentoring, and improving testing methodologies while collaborating with SOC, Threat Hunting, and Incident Response teams. The role drives the offensive security roadmap, documents findings for technical and executive audiences, and advances detections

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or equivalent experience.
• 8+ years of information security experience with hands-on pentesting, red teaming or offensive security.
• Experience leading complex penetration tests or engagements.
• Deep hands-on expertise in multiple domains (application/API, cloud, identity) with ability to chain weaknesses.
• Knowledge of attacker techniques across initial access, credential access, privilege escalation, persistence, lateral movement, evasion, data access.
• Hands-on experience with at least one major cloud platform (GCP/AWS/Azure) and modern identity environments (AD, SAML, OAuth, MFA, SSO).
• Experience with offensive security tooling and frameworks across web, identity, network, and adversary-emulation.
• Ability to develop or modify tooling using Python/PowerShell/Bash/Go.
• Experience incorporating AI into offensive security or red-team operations with real examples.

Responsibilities

• Lead risk-prioritized penetration testing and offensive security assessments across products, web applications, APIs, infrastructure, cloud, identity, SaaS, and enterprise technologies.
• Identify, validate, and safely exploit vulnerabilities and demonstrate how weaknesses can be chained into realistic attack paths.
• Scope, design, and execute red-team campaigns and adversary simulations based on relevant threats, emerging techniques, and business risk.
• Develop, validate, and incorporate AI-assisted workflows into offensive security activities, such as reconnaissance, campaign development, social engineering, tooling, and analysis.
• Develop custom scripts, tooling, payloads, and automation to support offensive security engagements.
• Conduct offensive security and red-team assessments with a primary focus on GCP and modern identity platforms, extending testing to AWS, Azure, and Kubernetes as relevant.
• Partner with SOC, Detection Engineering, Threat Hunting, and Incident Response teams to plan and execute purple-team exercises that validate telemetry, detections, investigation workflows, and response capabilities.
• Partner with engineering and defensive teams to prioritize remediation, retest fixes, and verify improvements to detections, logging, monitoring, playbooks, and defensive controls.
• Clearly document findings, attack paths, business impact, and recommended remediation, and communicate results to both technical and executive audiences.
• Own the technical direction and execution of the offensive security roadmap in partnership with security leadership.
• Mature testing methodologies and provide hands-on mentorship and technical pairing to other offensive security practitioners.
• Measure program effectiveness through verified remediation, reduced exposure to critical attack paths, and repeatable validation of detection and response coverage.

Skills

Initial access

Credential access

Privilege escalation

Lateral movement

Defense evasion

Data access

Cloud platforms (GCP/AWS/Azure)

MITRE ATT&CK mapping

Education

Bachelor’s degree or equivalent in CS/Cybersecurity/InfoSec

Job description

Alteryx, Inc. is seeking a Principal Offensive Security Engineer in the United States to lead risk-prioritized testing and red-team engagements across product and enterprise environments.

This highly hands-on role focuses on AI-assisted workflows, mentoring, and improving testing methodologies while collaborating with SOC, Threat Hunting, and Incident Response teams. The role drives the offensive security roadmap, documents findings for technical and executive audiences, and advances detections