Security Engineer, Offensive Security

About the Team

The Security Engineering team's mission is to safeguard our AI systems and maintain the trust of our users and society at large. Whether we're developing critical security infrastructure, building secure development practices, or partnering with our research and product teams, we are committed to operating as a world-class security organization and keeping the safety and trust of our users at the forefront of everything we do.

What You’ll Do:

• Conduct red and purple team engagements simulating advanced threat actors across our cloud infrastructure, endpoints and bare metal deployments.
• Penetration test specific, high value deployments.
• Contribute to AI-assisted security testing tooling and workflows.
• Work cross functionally with other security and engineering teams, particularly on AI-specific attack scenarios.
• Document and present findings to technical and executive audiences, translating attack narratives into actionable risk insights that inform security roadmaps.

Who You Are:

• 5+ years of hands-on experience in red teaming and offensive security operations
• Deep expertise in at least two of: macOS security, Linux Security, Cloud security (GCP/AWS/Azure), Kubernetes, CI/CD pipelines
• Track record of discovering novel attack vectors and chaining vulnerabilities creatively
• Experience conducting adversarial simulations against well-defended environments
• Strong engineering skills (Python, Go, or similar)
• Ability to write clear findings that drive action, helping teams understand risk and prioritize fixes
• Collaborative approach, working in close collaboration with the blue team

Strong candidates may also have experience with:

• Prior work at organizations with state actor threat models
• Interest in AI safety and how security engineering contributes to responsible AI developments
• Background testing AI/ML systems or agentic workflows
• Familiarity with detection engineering and SIEM/EDR platforms from the defensive side
• Experience with data center security or hardware-based attacks