Red Team Security Engineer (AI)

Location: Remote in Colombia, Costa Rica, or Mexico

Company

Open cloud object storage provider serving businesses, developers, IT professionals, and individuals across more than 175 countries.

What you will do

• Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents.
• Validate whether vulnerabilities and configuration weaknesses are reachable and practically exploitable.
• Develop and execute realistic attack paths across web applications, APIs, cloud infrastructure, identity systems, endpoints, and enterprise services.
• Use AI-assisted and agentic techniques for reconnaissance, vulnerability analysis, attack-path discovery, and controlled offensive testing.
• Test AI applications and agents for prompt injection, tool abuse, excessive privilege, identity compromise, and emerging attack classes.
• Validate mitigations and compensating controls, conduct purple-team exercises, and translate findings into improvements to architecture, configuration, detection, and response.

Requirements

• Experience in red teaming, penetration testing, adversary emulation, or offensive security engineering.
• Strong web, API, cloud, identity, operating-system, and network security fundamentals.
• Experience validating practical exploitability and developing realistic attack paths.
• Strong understanding of MITRE ATT&CK and modern adversary techniques.
• Familiarity with the OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, and MITRE ATLAS.
• Scripting or software-development experience.
• Experience safely using automation or AI-assisted techniques in offensive-security workflows.

Nice to have

• Experience assessing cloud-native or AI-enabled systems, conducting purple-team exercises, or simulating autonomous adversaries.

Culture & Benefits

• Emphasis on learning, development, and growth.
• Inclusive culture focused on diversity, equity, inclusion, and belonging.
• Equal opportunity employment commitment.