Senior Offensive Security Engineer

Unity

. Plan and run objective-based red team operations against cloud, corporate, and production environments.

Posted 10/30/2026full-timeRemote • United StatesSenior💰 $160,300 - $305,400 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in offensive security, including red teaming and penetration testing, with a strong focus on cloud environments and web application security. Proficient in scripting and programming to develop tools for security testing and capable of effectively communicating technical risks to diverse audiences.

Highest-signal resume keywords

Offensive Security ExperienceCloud Environment TestingWeb Application Security TestingScripting or Programming SkillsAdversary Emulation Operations

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Red TeamingPenetration TestingVulnerability ResearchCloud Security (GCP, AWS, Azure)KubernetesCI/CDWeb Application SecurityAPI Security TestingScripting (Python, Go, C/C++)Adversary Emulation

Soft Skills

Clear CommunicationTeam CollaborationTechnical Risk Explanation

Tools & Technologies

Automation ToolsSecurity Testing ToolsExploitation Tools

Certifications & Qualifications

OSCPOSEPOSWECRTO

Industry Keywords

GamingAd TechDeveloper-Facing PlatformsBug BountyCVEPublished ResearchOpen-Source Security Tooling

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesPythonUnityC++Go

About the role

Key responsibilities & impact

Plan and run objective-based red team operations against cloud, corporate, and production environments.
Run purple team exercises with Security Operations to test and improve detection and response.
Conduct deep security testing of Unity products and services, including web applications, APIs, the engine, editor, client runtime, ads and monetization systems, and developer-facing platforms.
Find and demonstrate attack paths across multi-cloud environments, Kubernetes and containers, CI/CD pipelines, identity, and secrets.
Test LLM integrations, AI-native products, and agent workflows for prompt injection, data leakage, tool misuse, and excessive permissions.
Write clear, prioritized findings with realistic impact; work with owning teams on remediation and retest fixes.
Build and maintain tools, scripts, and automation that scale adversarial engineering and turn repeated findings into continuous checks.
Develop risk-based testing plans, complete red team or adversary emulation operations, provide executive-ready readouts, and track remediation.
Collaborate with Product Security, Infrastructure Security, Security Operations, and engineering teams.

Requirements

What you’ll need

6+ years in offensive security (red teaming, penetration testing, purple teaming, or vulnerability research), including leading engagements end to end.
Hands-on experience attacking cloud environments (GCP, AWS, or Azure), including identity, Kubernetes and containers, and CI/CD.
Strong web application and API security testing skills, with the ability to find logic flaws, not just scanner results.
Solid scripting or programming ability, for example Python, Go, or C/C++, to build tools and exploits.
Experience running adversary emulation or red team operations against realistic objectives, and working with defenders in purple team exercises.
Clear written and verbal communication; ability to explain technical risk to engineers and non-technical leaders.
Ability to work as part of a team, share ideas, offer support, and celebrate wins together.
English proficiency sufficient for professional verbal and written exchanges.
Preferred: Experience testing LLM-based products, AI agents, or AI-assisted developer tools.
Preferred: Reverse engineering, binary exploitation, or game client and anti-cheat security experience.
Preferred: Experience in gaming, ad tech, or large developer-facing platforms.
Preferred: Bug bounty, CVEs, conference talks, published research, or open-source security tooling.
Relevant certifications such as OSCP, OSEP, OSWE, or CRTO are useful but will not substitute for a track record.

Benefits

Comp & perks

Comprehensive health, life, and disability insurance
Commute subsidy
Employee stock ownership
Competitive retirement/pension plans
Generous vacation and personal days
Support for new parents through leave and family-care programs
Office food snacks
Mental Health and Wellbeing programs and support
Employee Resource Groups
Global Employee Assistance Program
Training and development programs
Volunteering and donation matching program
Equity awards
Participation in company incentive plans, such as annual discretionary bonuses or sales commissions