IT Security, AI Redteamer

Spain Full-time Cybersecurity / Security EngineerMid-levelSenior

Posted 1 hour ago

This is a fully remote position, open to applicants in Spain.

📋 Description

• Strategize and implement AI-driven red team operations across web applications, APIs, cloud workloads, and infrastructure, providing prioritized technical reports and executive summaries.

• Offer clear remediation recommendations and verify fixes, focusing on critical and high-priority issues.

• Configure, optimize, and maintain offensive tools while creating automation playbooks to minimize manual triage and reduce false positives.

• Incorporate ongoing security assessments into CI/CD pipelines and platform workflows to facilitate continuous testing and minimize the attack surface.

• Conduct remediation workshops and knowledge transfer sessions, producing reusable runbooks for product and platform teams.

• Collaborate on triage and handoff processes with SOC, IT Operations, product teams, and central IT Security, while supporting governance and compliance frameworks (OWASP, API Security Top 10, CVSS).

⛳️ Requirements

• Demonstrated hands-on experience in red team or offensive security testing for web applications, APIs, and cloud environments.

• Strong understanding of OWASP Top 10, API Security Top 10, CVSS, secure SDLC, and threat modeling.

• Experience with AI-assisted offensive tools or a proven ability to integrate ML/NLP techniques into offensive workflows (e.g., Mythos, GPT Cyber).

• Extensive practical experience with Burp Suite, OWASP ZAP, Nmap, Metasploit, Nessus/OpenVAS, and Kali Linux.

• Comprehensive knowledge of cloud security, particularly with AWS, along with experience in Kubernetes and container security.

• Proficient scripting and automation skills (Python, Bash) and experience integrating security assessments into Git/GitLab CI or similar CI systems.

• Exceptional written and verbal communication skills in English.

• Familiarity with SIEM/logging platforms, OpenSearch, Grafana, or production monitoring stacks, with previous experience in financial services or regulated environments being advantageous.