Red Team Security Engineer

Backblaze External Website
Colombia +2 more
Remote

Who this role is best for

A natural match if you have experience in red teaming and AI-assisted offensive security.

Best fit for

  • Candidates with experience in red teaming and AI-assisted attack simulations
    — “The role combines traditional offensive security with AI-assisted and agentic adversary emulation”
  • Individuals who have tested AI systems for prompt injection and privilege abuse
    — “Test AI applications and agents for prompt injection, tool abuse, excessive privilege, identity compromise, and other emerging attack classes”
  • Professionals with a strong grasp of modern adversary techniques and MITRE ATT&CK
    — “Strong understanding of MITRE ATT&CK and modern adversary techniques”

Things to consider

  • The role requires a deep understanding of cloud infrastructure and identity systems
    — “Validate whether vulnerabilities and configuration weaknesses identified are reachable and practically exploitable”

How to stand out

  • Highlight experience with autonomous adversarial agent simulations in your resume
    — “Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents”
  • Showcase your ability to translate offensive findings into architectural improvements
    — “Translate offensive findings into actionable improvements to architecture, configuration, detections, and response capabilities”
  • Demonstrate proficiency in using AI for reconnaissance and attack-path discovery
    — “Use AI-assisted and agentic techniques for reconnaissance, vulnerability analysis, attack-path discovery, and controlled offensive testing”
  • Emphasize your experience with purple-team exercises and telemetry validation
    — “Conduct purple-team exercises with Security Analytics and Security Operations to validate telemetry, detection, and response effectiveness”
Pace · Fast PacedCollaboration · MediumAutonomy · HighDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • validating vulnerabilities
  • developing attack paths
  • conducting purple-team exercises
Typical background
red teamingpenetration testing

Skills & requirements

Required

Red TeamingPenetration TestingAdversary EmulationAi-assisted TechniquesCloud SecurityNetwork Security

Preferred

Agentic AILLM Security

Stack & domain

Red TeamingPenetration TestingAdversary EmulationOffensive Security EngineeringWeb SecurityAPI SecurityCloud SecurityIdentity SystemsOperating-system SecurityNetwork SecurityAi-assisted TechniquesAgentic Adversary EmulationPurple-team ExercisesCritical ThinkingProblem-solvingAttention To DetailSecurityAI ApplicationsAgentic ApplicationsCloud-native SystemsAi-enabled Systems

About the role

Original posting from Backblaze External Website via Greenhouse

About Backblaze

Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands.

Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $136M ARR and is the leading specialized storage cloud, managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals.

But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We’re seeking a Red Team Security Engineer to join our team!

About the Role

The Red Team Security Engineer continuously validates whether vulnerabilities, configurations, identities, applications, infrastructure, and AI-enabled systems can be exploited by realistic adversaries. The role combines traditional offensive security with AI-assisted and agentic adversary emulation to validate exposure and continuously improve defensive controls.

Key Responsibilities

Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents.

Validate whether vulnerabilities and configuration weaknesses identified are reachable and practically exploitable.

Develop and execute realistic attack paths across web applications, APIs, cloud infrastructure, identity systems, endpoints, and other enterprise services.

Use AI-assisted and agentic techniques for reconnaissance, vulnerability analysis, attack-path discovery, and controlled offensive testing.

Test AI applications and agents for prompt injection, tool abuse, excessive privilege, identity compromise, and other emerging attack classes.

Validate compensating controls and mitigations before or after deployment.

Conduct purple-team exercises with Security Analytics and Security Operations to validate telemetry, detection, and response effectiveness.

Translate offensive findings into actionable improvements to architecture, configuration, detections, and response capabilities.

Qualifications

Experience in red teaming, penetration testing, adversary emulation, or offensive security engineering.

Strong web, API, cloud, identity, operating-system, and network security fundamentals.

Experience validating practical exploitability and developing realistic attack paths.

Strong understanding of MITRE ATT&CK and modern adversary techniques.

Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, and MITRE ATLAS.

Scripting or software-development experience.

Experience safely using automation or AI-assisted techniques in offensive-security workflows.

Experience assessing cloud-native or AI-enabled systems, conducting purple-team exercises, or simulating autonomous adversaries is preferred.

At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here.

At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer.

To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.

Source: Backblaze External Website careers (Greenhouse)

Similar roles