Salary not listed
Red Team Security Engineer
OtherWorkplace — unknown
Published on 2026-10-19
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Validate whether vulnerabilities, configurations, identities, applications, infrastructure, and AI-enabled systems are practically exploitable. Use realistic adversary emulation, including AI-assisted techniques, and help improve defensive controls through purple-team exercises and actionable findings.
About the company
Backblaze provides cloud object storage and backup services for individuals and businesses. It serves teams that need affordable, durable storage and simple data protection.
Stack
MITRE ATT&CKOWASP Top 10 for LLMOWASP Top 10 for Agentic ApplicationsMITRE ATLAS
What you'll do
- Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents
- Assess vulnerabilities and configuration weaknesses for practical exploitability
- Develop and execute attack paths across applications, APIs, cloud infrastructure, identity systems, endpoints, and enterprise services
- Use AI-assisted techniques for reconnaissance, vulnerability analysis, attack-path discovery, and controlled testing
- Test AI applications and agents for prompt injection, tool abuse, excessive privilege, and identity compromise
- Validate security controls and mitigations before or after deployment
- Conduct purple-team exercises to test telemetry, detection, and response
- Translate findings into improvements to architecture, configuration, detection, and response
What we're looking for
- Experience in red teaming, penetration testing, adversary emulation, or offensive security engineering
- Strong web, API, cloud, identity, operating-system, and network security fundamentals
- Experience validating exploitability and developing realistic attack paths
- Understanding of MITRE ATT&CK and modern adversary techniques
- Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, and MITRE ATLAS
- Scripting or software-development experience
- Experience safely using automation or AI-assisted techniques in offensive-security workflows
Nice to have
- Experience assessing cloud-native or AI-enabled systems
- Experience conducting purple-team exercises or simulating autonomous adversaries