Senior Red Team Engineer: Cloud, Web & AI Security

Unity Enterprise; San Francisco, Mountain View (CA, WY, WA); Hybrid; USD 160,000 - 305,000; Full time

Benefits offered by this job

Health insurance

Employee stock ownership

Generous vacation and personal days

Commute subsidy

Job summary

Unity Technologies is seeking a Senior Offensive Security Engineer to lead adversary emulation campaigns across Unity’s cloud, on-prem, and product environments. You will plan and execute end-to-end red team operations, identify real-world risks, and collaborate with engineering teams to implement durable fixes.

Ideal candidates bring 6+ years in offensive security, hands-on cloud attack exposure (Kubernetes, containers, CI/CD), and strong web security testing skills.

Qualifications

• 6+ years in offensive security (red teaming, penetration testing, purple teaming, or vulnerability research).
• Hands-on experience attacking cloud environments (GCP, AWS, or Azure), including identity, Kubernetes and containers, and CI/CD.
• Strong web application and API security testing skills, with ability to find logic flaws, not just scanner results.
• Solid scripting or programming ability (Python, Go, or C/C++) to build tools and exploits.
• Experience running adversary emulation or red team operations and working with defenders in purple team exercises.
• Clear written and verbal communication; able to explain technical risk to engineers and non-technical leaders.
• Team player who collaborates and shares knowledge.

Responsibilities

• Adversary emulation and red teaming against Unity's cloud, corporate, and production environments.
• Application testing of Unity products and services, including web apps, APIs, engine, editor, and client runtime, ads and monetization.
• Cloud and infrastructure attack paths across multi-cloud environments (GCP, AWS, Azure), Kubernetes and containers, CI/CD pipelines, identity, and secrets.
• AI and agentic systems testing, including prompt injection, data leakage, tool misuse, and excessive permissions.
• Findings to fixes: write prioritized, actionable findings and work with owning teams on remediation, then retest to confirm fixes.
• Offensive tooling and automation: build and maintain tools, scripts, and automation to scale adversarial engineering.

Skills

Red team operations

Cloud security testing

Web security testing

Python

Go

C/C++

CI/CD security testing

Adversary emulation

Tools

Kubernetes

Containers

AWS

GCP

Azure

Job description

Unity Technologies is seeking a Senior Offensive Security Engineer to lead adversary emulation campaigns across Unity’s cloud, on-prem, and product environments. You will plan and execute end-to-end red team operations, identify real-world risks, and collaborate with engineering teams to implement durable fixes.

Ideal candidates bring 6+ years in offensive security, hands-on cloud attack exposure (Kubernetes, containers, CI/CD), and strong web security testing skills.