Red Team Security Engineer

Backblaze

. Continuously validate whether vulnerabilities, configurations, identities, applications, infrastructure, and AI-enabled systems can be exploited by realistic adversaries .

Posted 10/19/2026full-timeRemote • Colombia, Costa Rica, MexicoMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in red teaming and penetration testing, with a strong foundation in web, API, cloud, and network security. Proficient in using AI-assisted techniques for vulnerability analysis and attack-path discovery, while effectively translating offensive findings into security improvements.

Highest-signal resume keywords

Red TeamingPenetration TestingAdversary EmulationMITRE ATT&CKOWASP Top 10

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AnalysisAttack Path DevelopmentExploitability ValidationScriptingOffensive Security Engineering

Tools & Technologies

AI-Assisted TechniquesAutomation ToolsSecurity AnalyticsSecurity Operations

Industry Keywords

Purple-Team ExercisesCloud-Native SystemsIdentity SystemsEmerging Attack ClassesCompensating Controls

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Continuously validate whether vulnerabilities, configurations, identities, applications, infrastructure, and AI-enabled systems can be exploited by realistic adversaries
Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents
Validate whether vulnerabilities and configuration weaknesses are reachable and practically exploitable
Develop and execute realistic attack paths across web applications, APIs, cloud infrastructure, identity systems, endpoints, and enterprise services
Use AI-assisted and agentic techniques for reconnaissance, vulnerability analysis, attack-path discovery, and controlled offensive testing
Test AI applications and agents for prompt injection, tool abuse, excessive privilege, identity compromise, and emerging attack classes
Validate compensating controls and mitigations before or after deployment
Conduct purple-team exercises with Security Analytics and Security Operations to validate telemetry, detection, and response effectiveness
Translate offensive findings into improvements to architecture, configuration, detections, and response capabilities

Requirements

What you’ll need

Experience in red teaming, penetration testing, adversary emulation, or offensive security engineering
Strong web, API, cloud, identity, operating-system, and network security fundamentals
Experience validating practical exploitability and developing realistic attack paths
Strong understanding of MITRE ATT&CK and modern adversary techniques
Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, and MITRE ATLAS
Scripting or software-development experience
Experience safely using automation or AI-assisted techniques in offensive-security workflows
Experience assessing cloud-native or AI-enabled systems, conducting purple-team exercises, or simulating autonomous adversaries is preferred

Benefits

Comp & perks

Equal Opportunity Employer
Diversity, equity, and inclusion commitment
Culture emphasizing learning, developing, and growing
Backblaze Employee Privacy Notice regarding application data processing