Backed by seasoned founders who've already built and scaled a security category before, with frontier AI labs and Fortune 500 names already on the client list, this is a rare shot at getting in early on something with real traction, not just a pitch deck.
The role sits at the intersection of offensive security, adversary emulation, automation, and AI security , with a focus on reproducing realistic attacker behavior across endpoints, networks, applications, identity systems, cloud environments, and emerging AI attack surfaces.
The mandate is straightforward: think like an attacker, build realistic attack paths, break defensive assumptions, and uncover weaknesses before they become real-world incidents.
What You’ll Do
- Design and execute realistic, end-to-end adversary scenarios.
- Perform reconnaissance, initial-access simulation, privilege escalation, lateral movement, persistence, credential access, command-and-control, and data-exfiltration testing.
- Conduct Windows and Linux privilege-escalation testing.
- Assess Active Directory and enterprise identity environments.
- Perform web application and API security testing.
- Identify and exploit security misconfigurations and vulnerable services in controlled environments.
- Simulate realistic attacker TTPs mapped to MITRE ATT&CK.
- Build multi-stage attack chains to evaluate defensive controls.
- Evaluate EDR, SIEM, network, identity, application, and cloud security controls from an adversarial perspective.
- Develop scripts, tooling, and automation to reproduce attacker behavior at scale.
- Use AI to accelerate reconnaissance, attack-path analysis, test generation, and adversarial simulation.
- Explore emerging AI attack surfaces including agents, tool use, prompt injection, MCP environments, and autonomous workflows.
- Produce detailed technical reports covering attack paths, evidence, impact, and remediation.
- Collaborate with blue teams, detection engineers, security researchers, and product engineers.
What You Bring
- Up to 5 years of experience in red teaming, penetration testing, offensive security, adversary emulation, or related roles.
- Strong knowledge of Windows and Linux security.
- Hands-on understanding of Active Directory attacks and enterprise identity environments.
- Experience with privilege escalation and lateral movement.
- Strong understanding of web application and API security.
- Understanding of credential-access techniques and common enterprise attack paths.
- Familiarity with data-exfiltration techniques and security-control validation.
- Working knowledge of MITRE ATT&CK.
- Ability to develop offensive-security automation using Python, PowerShell, Bash, C#, Go, or similar languages.
- Ability to clearly document and communicate complex attack chains.
Good to Have
- Strong performance in CTF competitions or recognized security communities.
- Hack The Box, TryHackMe, or similar competitive-security experience.
- OSCP, OSEP, OSWE, CRTO, CRTP, GXPN, or similar certifications.
- Experience with cloud offensive security across AWS, Azure, or GCP.
- Experience testing EDR or other endpoint-security technologies.
- Experience developing offensive-security tools or conducting open-source security research.
- Bug bounty or vulnerability-research experience.
- Exposure to AI security, LLM security, AI red teaming, prompt injection, MCP security, or agentic AI.
- Experience building automated adversarial simulations or security-testing frameworks.
The Opportunity
This is an early seat in a category being shaped around the security of AI agents and autonomous systems . The work spans traditional offensive security while moving into new attack surfaces created when AI systems gain access to enterprise data, tools, applications, and infrastructure.
For someone who wants to work where red teaming meets AI , the opportunity is to help define how these systems are attacked, tested, and secured at production scale.
Think like an attacker. Build what’s next. Send your profile to