Red Team Security Engineer

• Continuously validate whether vulnerabilities, configurations, identities, applications, infrastructure, and AI-enabled systems can be exploited by realistic adversaries
• Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents
• Validate whether vulnerabilities and configuration weaknesses are reachable and practically exploitable
• Develop and execute realistic attack paths across web applications, APIs, cloud infrastructure, identity systems, endpoints, and enterprise services
• Use AI-assisted and agentic techniques for reconnaissance, vulnerability analysis, attack-path discovery, and controlled offensive testing
• Test AI applications and agents for prompt injection, tool abuse, excessive privilege, identity compromise, and emerging attack classes
• Validate compensating controls and mitigations before or after deployment
• Conduct purple-team exercises with Security Analytics and Security Operations to validate telemetry, detection, and response effectiveness
• Translate offensive findings into improvements to architecture, configuration, detections, and response capabilities

• Experience in red teaming, penetration testing, adversary emulation, or offensive security engineering
• Strong web, API, cloud, identity, operating-system, and network security fundamentals
• Experience validating practical exploitability and developing realistic attack paths
• Strong understanding of MITRE ATT&CK and modern adversary techniques
• Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, and MITRE ATLAS
• Scripting or software-development experience
• Experience safely using automation or AI-assisted techniques in offensive-security workflows
• Experience assessing cloud-native or AI-enabled systems, conducting purple-team exercises, or simulating autonomous adversaries is preferred

• Equal Opportunity Employer
• Diversity, equity, and inclusion commitment
• Culture emphasizing learning, developing, and growing
• Backblaze Employee Privacy Notice regarding application data processing