Global Red Team AI Engineer – AVP

MUFG

. Support planning and execution of Red Team, Purple Team, adversary simulation, and control validation engagements .

Posted 11/12/2026full-timeUnited StatesLead💰 $120,000 - $153,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in offensive security, including Red Team operations, adversary emulation, and vulnerability analysis, with a strong focus on AI security risks and hands-on testing across various attack surfaces. Proficient in scripting and utilizing security tools to enhance control validation and threat-informed testing.

Highest-signal resume keywords

Offensive Security TestingAdversary EmulationAI Security RisksScripting with PythonVulnerability Analysis

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Red Team OperationsPenetration TestingControl ValidationThreat-Informed TestingVulnerability AnalysisAI GovernanceAttack TechniquesScriptingAdversarial TestingMITRE ATT&CK Mapping

Soft Skills

CollaborationCommunicationDocumentation

Tools & Technologies

Offensive Security ToolsAI-Assisted ToolsCloud PlatformsAPIsData Integrations

Certifications & Qualifications

OSCPGPENGWAPTGCIHGCIAGSECCISSP

Industry Keywords

CybersecurityInformation TechnologyData SecurityNISTFFIECGLBASOXPCI

Tech Stack

Tools & technologies

CloudCyber SecurityJavaScriptLinuxPython

About the role

Key responsibilities & impact

Support planning and execution of Red Team, Purple Team, adversary simulation, and control validation engagements
Assist with target research, scope development, rules of engagement, infrastructure preparation, and operational documentation
Coordinate with defensive, engineering, risk, and business stakeholders
Perform hands-on offensive security testing across network, endpoint, identity, application, cloud, and selected physical attack surfaces
Execute reconnaissance, initial access validation, privilege escalation, lateral movement, persistence simulation, and control evasion in approved environments
Develop, modify, and safely use scripts, payloads, tooling, and tradecraft for adversary emulation
Support adversarial testing of AI and LLM systems, including prompt injection, data leakage, tool misuse, model behavior abuse, and guardrail bypass scenarios
Analyze AI-enabled applications, copilots, automation workflows, agents, plugins, APIs, and data integrations for security and abuse risks
Document AI security observations, risk impact, exploitability, control gaps, and remediation recommendations
Use AI-assisted analysis for research, data review, reporting, detection mapping, and test-case development
Track emerging AI threats, attacker use of AI, and relevant industry guidance
Research real-world threat actor TTPs and emerging AI-enabled attack techniques
Sponsor development of red team tools, scripts, and repeatable methodologies
Establish standards for tooling governance, safe use, and audit readiness
Prepare engagement notes, evidence packages, attack narratives, findings, remediation guidance, and executive-ready summaries
Map observations to frameworks, controls, detections, and business risk themes
Partner with blue team, cyber defense, engineering, governance, and application teams to validate remediation and improve control effectiveness

Requirements

What you’ll need

4+ years of experience in offensive security, red team operations, penetration testing, application security, cloud security, cyber defense, or related security assessment roles
Hands-on experience supporting security assessments, adversary emulation, control validation, vulnerability analysis, or threat-informed testing
Exposure to AI security, LLM testing, AI governance, data security, machine learning workflows, or secure use of AI-assisted tools is preferred
Working knowledge of attack techniques across Windows, Linux, Active Directory, web applications, APIs, cloud platforms, and identity systems
Ability to write or modify scripts and tools using Python, PowerShell, Bash, JavaScript, or similar
Familiarity with offensive security tools, vulnerability validation, command-and-control concepts, detection engineering concepts, and MITRE ATT&CK mapping
Understanding of AI security risks including prompt injection, excessive agency, insecure tool use, sensitive data exposure, insecure plugins, model abuse, and AI-enabled social engineering
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Data Science, or equivalent experience is preferred
Security certifications such as OSCP, GPEN, GWAPT, GCIH, GCIA, GSEC, CISSP, or similar are preferred but not required
Familiarity with NIST, FFIEC, GLBA, SOX, PCI, or internal control standards is beneficial
Visa sponsorship/support is based on business needs; sponsorship is not anticipated for this position

Benefits

Comp & perks

Discretionary performance-based bonus and/or incentive compensation
Comprehensive health and wellness benefits
Retirement plans
Educational assistance and training programs
Income replacement for qualified employees with disabilities
Paid maternity and parental bonding leave
Paid vacation, sick days, and holidays
Hybrid work schedule: four days on-site and one remote day per week