Red Team Engineer – Offensive Security Lead

🕒 il y a 28 jours

🇺🇸 États-Unis – Télétravail

💵 $150 000 - $175 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Authentic8

Site WebLinkedInTous les Emplois

51 - 200 employés

🔒 Cybersecurity

📋 Conformité

🏛️ Gouvernement

💰 Series B en 2017-08

Cybersecurity • Compliance • Government

Authentic8 est une entreprise spécialisée dans la navigation sécurisée et les enquêtes numériques grâce à sa plateforme Silo. Silo offre une expérience de navigation hautement sécurisée et isolée, protégeant les utilisateurs des logiciels malveillants et de l'accès non autorisé aux données tout en restant anonymes sur le web de surface, le deep web et le dark web. Les produits de l'entreprise, tels que l'accès aux applications Zero Trust et l'isolation des liens web à risque, garantissent un accès sécurisé et géré aux applications et au contenu web, en respectant des normes strictes de cybersécurité et de conformité. Elle s'adresse aux agences gouvernementales et aux entreprises commerciales, offrant des solutions pour l'intelligence en cybersécurité, la criminalité financière, la conformité et l'accès sécurisé aux applications à travers des réseaux et dispositifs divers.

Description

• Design, build, and operate an AI-augmented red teaming harness using frontier LLM APIs. • Implement a control loop architecture (Plan | Act | Observe | Adjust) for autonomous and semi-autonomous vulnerability discovery. • Integrate the harness with purpose-built SBOM tooling (Endor Labs), CVE monitoring feeds (NVD, OSV.dev, EPSS/KEV, GitHub Advisory Database, and vendor-specific bulletins), and our CI/CD pipeline (Snyk, SonarQube). • Conduct adversarial testing across four attack perspectives: (Internal source code, External unauthenticated adversary, Internal authenticated user, and Internal unprivileged adversary) • Chain findings identify exploitable paths and corresponding vulnerabilities. • Validate and prioritize findings using CVSS, EPSS, and KEV context before handing off to the patch management pipeline. • Support the development and day-to-day operation of Authentic8's internal Bug Bounty Program. • Collaborate with engineering on custom mitigation decisions when vendor patches are unavailable. • Assume ownership of security stage-gates within our CI/CD pipeline, integrating Snyk, SonarQube, and harness findings into the build process. • Work alongside the SOC Lead on CVE monitoring, alerting, and vulnerability prioritization workflows. • Partner with DevSecOps Engineers on harness architecture and pipeline integration. • Provide technical input to the Integrated Operations Center on detection use case design for our SIEM. • Regularly brief the VP of Information Security on findings, program health, and checkpoint criteria.

🎯 Exigences

• 5+ years in cybersecurity, penetration testing, or red team operations • Demonstrated experience building tools: scripting exploits, automating workflows, or constructing test harnesses (Python and/or Go strongly preferred) • Hands-on experience with LLM APIs in a security or agent context, including an understanding of tool use, control loops, and context management in agent architectures • Proficiency with static and dynamic analysis (SAST/DAST) and the ability to interpret and chain findings from automated tooling • Working knowledge of CVE and vulnerability data sources, including NVD, EPSS, KEV, OSV.dev, and the GitHub Advisory Database • Experience testing cloud-hosted SaaS platforms (GCP familiarity preferred) • Familiarity with container security (containered, Docker) and Linux-based infrastructure • Ability to work independently, manage your own scope, and deliver against defined milestones • Excellent documentation and communication skills • Must be US citizen

🏖️ Avantages

• medical • dental • vision • flexible PTO • a 401k program • stock options