Red Team Security Engineer

This is a fully remote position, open to applicants in Colombia, +2 more countries.

📋 Description

• Ongoing validation of whether vulnerabilities, configurations, identities, applications, infrastructure, and AI-driven systems can be exploited by realistic adversaries.

• Simulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents.

• Assess whether vulnerabilities and configuration weaknesses are accessible and practically exploitable.

• Create and implement realistic attack paths across web applications, APIs, cloud infrastructure, identity systems, endpoints, and enterprise services.

• Utilize AI-assisted and agentic strategies for reconnaissance, vulnerability assessment, attack-path identification, and controlled offensive testing.

• Evaluate AI applications and agents for prompt injection, tool misuse, excessive privilege, identity compromise, and new attack vectors.

• Confirm compensating controls and mitigations prior to or following deployment.

• Perform purple-team exercises with Security Analytics and Security Operations to assess telemetry, detection, and response effectiveness.

• Convert offensive findings into enhancements for architecture, configuration, detections, and response capabilities.

⛳️ Requirements

• Experience in red teaming, penetration testing, adversary emulation, or offensive security engineering.

• Strong foundational knowledge in web, API, cloud, identity, operating system, and network security.

• Proven experience in validating practical exploitability and creating realistic attack paths.

• In-depth understanding of MITRE ATT&CK and contemporary adversary techniques.

• Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, and MITRE ATLAS.

• Experience in scripting or software development.

• Background in safely employing automation or AI-assisted techniques within offensive-security workflows.

• Experience evaluating cloud-native or AI-enabled systems, conducting purple-team exercises, or simulating autonomous adversaries is preferred.

🏝️ Benefits

• Equal Opportunity Employer.

• Commitment to diversity, equity, and inclusion.

• Culture that emphasizes learning, development, and growth.

• Backblaze Employee Privacy Notice regarding application data processing.