Senior AI-Driven Red Team Security Engineer

nscaleoperationsukltd; New York (NY); In loco; USD 140.000 - 190.000; Tempo pieno

Descrizione del lavoro

Nscale is seeking a Senior Security Engineer to join the Red Team within the global CISO organization. You will conduct offensive security campaigns across cloud, infrastructure, identity systems, endpoints, and applications, leveraging AI to accelerate red teaming and ensure robust security controls.

You will own end-to-end workstreams, partner with Detection & Response and Security Engineering, and contribute to measurable improvements.

Competenze

• 5+ years of experience in red teaming, offensive security, or penetration testing.
• Hands-on experience applying large language models to offensive security work.
• Experience building agentic workflows that orchestrate multiple models and tools.
• Strong expertise across network, application, cloud, and identity security.
• Deep understanding of MITRE ATT&CK and attacker methodologies.

Mansioni

• Plan and execute red team campaigns and adversary simulations with the Red Team Lead and teammates.
• Own scope, timelines, evidence, and reporting for workstreams across campaigns.
• Emulate real-world attacker behaviour to identify weaknesses across infrastructure, identity, endpoints, and apps.
• Build agentic workflows that orchestrate models and tools to accelerate offensive security work.
• Evaluate new models and tooling, including open-weight models, to improve throughput.
• Collaborate with Detection & Response and Security Engineering to remediate vulnerabilities and strengthen system design.

Conoscenze

Red team

Offensive security

Penetration testing

Cloud security

MITRE ATT&CK

Agentic workflows

Team collaboration

Descrizione del lavoro

Nscale is seeking a Senior Security Engineer to join the Red Team within the global CISO organization. You will conduct offensive security campaigns across cloud, infrastructure, identity systems, endpoints, and applications, leveraging AI to accelerate red teaming and ensure robust security controls.

You will own end-to-end workstreams, partner with Detection & Response and Security Engineering, and contribute to measurable improvements.