Global Red Team AI Engineer – AVP

MUFG

. Support the planning and execution of Red Team, Purple Team, adversary simulation, and control validation engagements .

Posted 11/12/2026full-timeUnited StatesLead💰 $120,000 - $153,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in offensive security, including Red Team operations, adversary emulation, and vulnerability analysis, while effectively collaborating with cross-functional teams to enhance security measures and mitigate risks associated with AI technologies.

Highest-signal resume keywords

Offensive Security TestingRed Team OperationsAdversary EmulationPython ScriptingAI Security Risks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingVulnerability AnalysisControl ValidationThreat-Informed TestingAttack TechniquesAI GovernanceMachine Learning WorkflowsCommand-and-Control ConceptsDetection EngineeringMITRE ATT&CK Mapping

Soft Skills

CollaborationCommunicationAnalytical ThinkingProblem Solving

Tools & Technologies

PythonPowerShellBashJavaScriptOffensive Security ToolsAI-Assisted Tools

Certifications & Qualifications

OSCPGPENGWAPTGCIHGCIAGSECCISSP

Industry Keywords

CybersecurityCloud SecurityData SecurityRegulatory FrameworksNISTFFIECGLBASOXPCI

Tech Stack

Tools & technologies

CloudCyber SecurityJavaScriptLinuxPython

About the role

Key responsibilities & impact

Support the planning and execution of Red Team, Purple Team, adversary simulation, and control validation engagements
Assist with target research, scope development, rules of engagement, infrastructure preparation, and operational documentation
Coordinate with defensive, engineering, risk, and business stakeholders to structure engagements and make findings actionable
Perform hands-on offensive security testing across network, endpoint, identity, application, cloud, and selected physical attack surfaces
Execute reconnaissance, initial access validation, privilege escalation, lateral movement, persistence simulation, and control evasion in approved environments
Develop, modify, and safely use scripts, payloads, tooling, and tradecraft for realistic adversary emulation
Support adversarial testing of AI and LLM systems, including prompt injection, data leakage, tool misuse, model behavior abuse, and guardrail bypass scenarios
Analyze AI-enabled applications, copilots, automation workflows, agents, plugins, APIs, and data integrations for security and abuse risks
Document AI security observations, risk impact, exploitability, control gaps, and recommended remediation
Use AI-assisted analysis responsibly for research, data review, reporting, detection mapping, and test-case development
Track emerging AI threats, attacker use of AI, and relevant industry guidance
Research real-world threat actor TTPs and emerging AI-enabled attack techniques
Sponsor development of red team tools, scripts, and repeatable methodologies
Establish standards for tooling governance, safe use, and audit readiness
Prepare engagement notes, evidence packages, attack narratives, findings, remediation guidance, and executive-ready summaries
Map observations to frameworks, controls, detections, and business risk themes
Partner with blue team, cyber defense, engineering, governance, and application teams to validate remediation and improve control effectiveness

Requirements

What you’ll need

4+ years of experience in offensive security, red team operations, penetration testing, application security, cloud security, cyber defense, or related security assessment roles
Hands-on experience supporting security assessments, adversary emulation, control validation, vulnerability analysis, or threat-informed testing
Exposure to AI security, LLM testing, AI governance, data security, machine learning workflows, or secure use of AI-assisted tools is preferred
Working knowledge of common attack techniques across Windows, Linux, Active Directory, web applications, APIs, cloud platforms, and identity systems
Ability to write or modify scripts and tools using Python, PowerShell, Bash, JavaScript, or similar
Familiarity with offensive security tools, vulnerability validation, command-and-control concepts, detection engineering concepts, and MITRE ATT&CK mapping
Understanding of AI security risks such as prompt injection, excessive agency, insecure tool use, sensitive data exposure, insecure plugins, model abuse, and AI-enabled social engineering
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Data Science, or equivalent experience is preferred
Security certifications such as OSCP, GPEN, GWAPT, GCIH, GCIA, GSEC, CISSP, or similar are preferred but not required
Familiarity with regulatory, risk, or control frameworks such as NIST, FFIEC, GLBA, SOX, PCI, or internal control standards is beneficial
Visa sponsorship/support is based on business needs; the posting does not anticipate providing visa sponsorship/support for this position

Benefits

Comp & perks

Discretionary performance-based bonus and/or incentive compensation
Comprehensive health and wellness benefits
Retirement plans
Educational assistance and training programs
Income replacement for qualified employees with disabilities
Paid maternity and parental bonding leave
Paid vacation, sick days, and holidays