Senior Red Team Engineer | Adversary Emulation & Cloud

LE130 Unity Technologies SF; San Francisco (CA); Sur place; USD 204 000 - 305 000; Plein temps

Avantages offerts par ce poste

Health insurance

Life insurance

Disability insurance

Commute subsidy

Employee stock ownership

Retirement/pension plans

Generous vacation and personal days

Parental leave and family-care support

Office snacks

Mental Health and Wellbeing programs

Employee Resource Groups

Global Employee Assistance Program

Training and development programs

Volunteering and donation matching

Résumé du poste

Unity Technologies SF is seeking an experienced security professional to drive offensive security across Unity's engine, editor, cloud services, ads, and developer platforms. You will plan red team campaigns, perform adversary emulation, and translate findings into actionable fixes.

You will work with Product Security, Infrastructure Security, and engineers; require 6+ years in offensive security, cloud experience (GCP/AWS/Azure), strong web security skills, scripting ability, and excellent

Qualifications

• 6+ years in offensive security (red teaming, penetration testing, purple teaming, or vulnerability research), including leading engagements end to end.
• Hands-on experience attacking cloud environments (GCP, AWS, or Azure), including identity, Kubernetes and containers, and CI/CD.
• Strong web application and API security testing skills, with the ability to find logic flaws, not just scanner results.
• Solid scripting or programming ability (for example Python, Go, or C/C++) to build tools and exploits.
• Experience running adversary emulation or red team operations against realistic objectives, and working with defenders in purple team exercises.
• Clear written and verbal communication. You can explain technical risk to engineers and to non-technical leaders.
• You genuinely enjoy working as part of a team, sharing ideas, offering support, and celebrating wins together.

Responsabilités

• Adversary emulation and red teaming: plan and run objective-based red team operations against our cloud, corporate, and production environments, modeled on threats relevant to Unity.
• Run purple team exercises with Security Operations to test and improve detection and response.
• Application testing: deep security testing of Unity products and services, including web applications and APIs, the engine, editor and client runtime, ads and monetization systems, and developer-facing platforms.
• Cloud and infrastructure attack paths: find and demonstrate attack paths across multi-cloud environments (GCP, AWS, Azure), Kubernetes and containers, CI/CD pipelines, identity, and secrets.
• AI and agentic systems: test LLM integrations, AI-native products, and agent workflows for issues such as prompt injection, data leakage, tool misuse, and excessive permissions.
• Findings to fixes: write clear, prioritized findings with realistic impact, work with owning teams on remediation, and retest to confirm fixes.
• Offensive tooling and automation: build and maintain tools, scripts, and automation that scale adversarial engineering, testing and turn repeated findings into continuous checks.

Connaissances

Offensive security

Red team engagements

Cloud security testing

Kubernetes & containers

CI/CD security

Web/API security testing

Python

Go

C/C++

Communication skills

Threat modeling

Outils

Kubernetes

AWS

Azure

CI/CD pipelines

Description du poste

Unity Technologies SF is seeking an experienced security professional to drive offensive security across Unity's engine, editor, cloud services, ads, and developer platforms. You will plan red team campaigns, perform adversary emulation, and translate findings into actionable fixes.

You will work with Product Security, Infrastructure Security, and engineers; require 6+ years in offensive security, cloud experience (GCP/AWS/Azure), strong web security skills, scripting ability, and excellent