Attack Operations Center Analyst - Remote Mexico

Armadin

6d•Remote

About The Position

Armadin is seeking an Attack Operations Center (AOC) Analyst who understands both offensive information security and artificial intelligence workflows. This role requires knowledge of web application architecture, authentication, and network security, with the ability to learn advanced concepts like AI safety, attacker data classification, and exploit validation. It's a technical, offensive-focused position, distinct from a traditional defensive SOC role, offering the chance to work with AI-driven red teaming and world-class red teamers. Responsibilities include reviewing AI attacker decisions for safety and appropriateness, bypassing authentication challenges, guiding AI reconnaissance, and providing feedback to engineering teams to improve AI models. The role involves acting as a 'human-in-the-loop' for complex security problems and testing AI-driven scenarios for clients.

Requirements

1+ years’ experience, via internships, classes, projects, or professional work, in at least one of the following: Web application or network penetration testing, Security Operations Center (SOC) or tactical monitoring environments, Manual interaction with complex authentication flows, APIs, or session management, Evaluating or auditing automated security tools and vulnerability scanners
Ability to rapidly context-switch between multiple live engagements while maintaining strict attention to detail and safety protocols.
Must be eligible to work in Mexico without sponsorship.

Nice To Haves

Prior experience working alongside Artificial Intelligence, Machine Learning models, or automated offensive security frameworks.
Experience in security competitions, CTFs, and/or testing platforms such as Hack the Box, TryHackMe, PortSwigger Web Security Academy, etc.
Strong technical acumen and the ability to quickly assimilate new information to make time-sensitive "human-in-the-loop" judgments.
Ability to document and explain technical decisions clearly to internal safety and engineering teams.

Responsibilities

Perform Disengagement Validation by reviewing AI attacker decisions to ensure each proposed action is appropriate and safe given the specific application context.
Unblock AI authentication hurdles by providing necessary context, solving CAPTCHAs, or utilizing alternative avenues to establish access.
Guide the AI during the reconnaissance phase and ensure Attack Data Classification is accurate and actionable.
Serve as a critical feedback contributor, feeding your tactical decisions back into the system to help safety engineers calibrate models, reduce false positives, and maintain rigorous safety guarantees.
Navigate and maintain deep context across multiple simultaneous client engagements.