Senior Offensive Security Engineer

Unity Technologies SF; Olympia (WA); Sur place; USD 160 000 - 305 000; Plein temps

Avantages offerts par ce poste

Commute subsidy

Employee stock ownership

Competitive retirement plans

Generous vacation and personal days

Parental leave and family-care support

Résumé du poste

Unity Technologies in Olympia, WA is seeking a Senior Offensive Security Engineer to lead red team operations and adversary emulation across Unity products. The role requires coordinating across cloud environments and developers to identify and remediate high‑impact risks.

You will conduct end-to-end engagements, perform deep testing of web apps, APIs, and services, and build automation to scale security checks. Onsite work with a strong emphasis on collaboration and risk-based findings.

Qualifications

• 6+ years in offensive security (red teaming, pentesting, purple teaming, or vulnerability research).
• Experience leading engagements end to end.
• Hands-on attacking cloud environments (GCP, AWS, or Azure).
• Strong web application and API security testing skills with logic flaw detection.

Responsabilités

• Plan and run objective-based red team operations against cloud, corporate, and production environments.
• Execute purple team exercises with Security Operations to improve detection and response.
• Perform deep security testing across Unity products and services (web apps, APIs, engine, editor, client runtime, ads, monetization).
• Discover and demonstrate attack paths across multi-cloud (GCP, AWS, Azure), Kubernetes and containers, CI/CD pipelines, identity, and secrets.
• Test LLM integrations and AI-native products for issues like prompt injection, data leakage, tool misuse, and excessive permissions.
• Produce clear, prioritized findings and partner with owning teams on remediation and retest.
• Build and maintain tools, scripts, and automation to scale adversarial engineering and continuous checks.

Connaissances

Red teaming

Cloud security

Web API security

Scripting (Python/Go/C/C++)

Adversary emulation

Communication

Team collaboration

Outils

GCP

AWS

Azure

Kubernetes

CI/CD

LLM integrations

Description du poste

Unity Technologies SF is hiring a Senior Offensive Security Engineer to lead realistic adversary emulation and red teaming across its products and environments.

Responsibilities

• Plan and run objective-based red team operations against cloud, corporate, and production environments, aligned to Unity-relevant threats.
• Execute purple team exercises with Security Operations to improve detection and incident response.
• Perform deep security testing across Unity products and services, including web applications and APIs, engine, editor, and client runtime, ads and monetization, and developer-facing platforms.
• Discover and demonstrate attack paths across multi-cloud environments (GCP, AWS, Azure), Kubernetes and containers, CI/CD pipelines, identity, and secrets.
• Test LLM integrations, AI-native products, and agent workflows for issues including prompt injection, data leakage, tool misuse, and excessive permissions.
• Produce clear, prioritized findings with realistic impact; partner with owning teams on remediation and retest to confirm fixes.
• Build and maintain tools, scripts, and automation to scale adversarial engineering and convert repeat findings into continuous checks.

Requirements

• 6+ years in offensive security (red teaming, penetration testing, purple teaming, or vulnerability research), including experience leading engagements end to end.
• Hands-on experience attacking cloud environments (GCP, AWS, or Azure) including identity, Kubernetes and containers, and CI/CD.
• Strong web application and API security testing skills, including ability to identify logic flaws, not only scanner output.
• Solid scripting or programming ability (e.g., Python, Go, or C/C++) to build tools and exploits.
• Experience running adversary emulation or red team operations against realistic objectives, plus collaboration with defenders in purple team exercises.
• Clear written and verbal communication, including explaining technical risk to engineers and non-technical leaders.
• Enjoys working in a team: sharing ideas, offering support, and celebrating wins.

Technologies

• Python, Go, C/C++
• GCP, AWS, Azure
• Kubernetes, CI/CD
• LLM integrations

Success looks like in the first 12 months

• Create a risk-based testing plan across Unity's highest-value targets, aligned with security leadership and owning engineering teams.
• Complete several end-to-end red team and/or adversary emulation operations with executive-ready readouts and tracked remediation.
• Drive measurable detection improvements through purple team exercises with Security Operations.
• Deliver reusable tooling or automation that converts recurring finding classes into continuous checks.

What you bring

• Experience testing LLM-based products, AI agents, or AI-assisted developer tools.
• Background in reverse engineering, binary exploitation, or game client and anti-cheat security.
• Experience in gaming, ad tech, or large developer-facing platforms.
• Examples such as bug bounty, CVEs, conference talks, published research, or open-source security tooling.
• Relevant certifications are useful (OSCP, OSEP, OSWE, CRTO) but won't replace a track record.

How you work

• Thinks like an attacker and acts as a partner.
• Targets real impact over finding volume; distinguishes issues that matter from those that only look good on paper.
• Operates safely in production using clear rules of engagement.
• Automates work and repeatable testing.
• Builds trust with engineering teams and holds a high bar on remediation completion.

Benefits

• Comprehensive health, life, and disability insurance
• Commute subsidy
• Employee stock ownership
• Competitive retirement/pension plans
• Generous vacation and personal days
• Support for new parents through leave and family-care programs
• Office food snacks
• Mental Health and Wellbeing programs and support
• Employee Resource Groups
• Global Employee Assistance Program
• Training and development programs
• Volunteering and donation matching program

Location: Olympia, WA (onsite)

Salary: USD 160,300 - 305,400 per year

Minimum experience: 6 years