Principal Red Team Operator

Armadin•Palo Alto, CA

1d•Onsite

About The Position

Armadin is building autonomous proactive security through specialized AI agents that continuously discover, exploit, and chain vulnerabilities across external, internal, identity, cloud, and application attack surfaces. The Principal Red Team Operator will perform hands-on red team operations and encode expert tradecraft into the reasoning used by Armadin’s agents. The role involves pressure-testing full attack chains, identifying weaknesses in the agent swarm, and improving its ability to operate like an expert adversary at scale. The operator will lead sophisticated, multidisciplinary engagements and collaborate with product engineering and AI teams to translate offensive security needs into platform capabilities, tool integrations, and AI-driven attack simulations. The role also contributes to research, tooling, technical leadership, customer and executive communication, and the growth of the red team. This position is onsite in Palo Alto, California, and includes collaboration with product engineering teams and participation in complex engagements and strategic initiatives.

Requirements

At least 8 years of hands-on offensive security experience.
Extensive experience in multiple disciplines, including advanced web application penetration testing and secure code review; network penetration testing and enterprise infrastructure attacks; mobile application security and reverse engineering; and cloud infrastructure, identity systems, and multi-cloud red team operations.
Experience with web application security issues such as OWASP Top 10, business logic flaws, authentication and authorization bypass, API security, and control flow analysis.
Experience with Active Directory attacks, lateral movement, privilege escalation, and persistence operations.
Experience assessing mobile applications and reverse engineering thick/thin clients and binaries across iOS, Android, Windows, macOS, or Linux.
Experience with cloud security and identity technologies such as Kerberos, SAML, and OAuth.
Ability to integrate findings across attack surfaces into comprehensive offensive campaigns.
Expert proficiency with offensive security tools across multiple domains, such as Burp Suite, OWASP ZAP, Caido, Nmap, Metasploit, Cobalt Strike, Impacket, BloodHound, Responder, CrackMapExec, Frida, Ghidra, and IDA Pro.
Advanced scripting and tool-development skills in Python, Bash, PowerShell, or compiled languages, including the ability to extend C2 frameworks, develop custom exploits, and create application-specific tooling.
Deep understanding of network protocols, packet-level analysis, cryptography, system architecture, and application design patterns.
Proficiency with Windows, Linux, and macOS, container technologies, and cloud environments such as AWS, Azure, and GCP.
Willingness to work onsite in the Palo Alto, California office and collaborate with product engineering teams.
Exceptional written and verbal communication skills, including the ability to explain complex technical concepts to executive leadership, product teams, and diverse client audiences.
Strategic thinking and ability to align technical initiatives with business objectives; experience influencing product roadmaps or organizational strategy.
Experience providing technical mentorship and guidance.

Nice To Haves

Experience working with AI/ML models, automated offensive security frameworks, or AI-augmented attack tools.
Published research, conference speaking, or significant open-source contributions in offensive security.
Experience in startup or high-growth environments and ability to take on varied responsibilities and drive initiatives with minimal bureaucracy.
Advanced certifications such as OSCP, OSCE, CRTE, CRTO, or equivalent elite-level credentials.
A track record of building offensive security tools or frameworks adopted by the community.

Responsibilities

Execute multidisciplinary red team engagements across application security, network penetration testing, cloud infrastructure, and identity systems.
Identify novel attack chains and weaknesses through source code review, network analysis, binary reverse engineering, and infrastructure assessment.
Produce technically rigorous reports and executive briefings with remediation roadmaps and risk narratives for technical and non-technical stakeholders.
Conduct threat analysis and intelligence gathering into enterprise attack surfaces, adversarial TTPs, business risk, and compliance implications.
Share tradecraft, tool development insights, and lessons learned to strengthen team capabilities.
Work with product engineering and AI teams to turn red team methodologies and adversarial insights into platform capabilities, tool integrations, and AI-driven attack simulations.
Represent offensive security tradecraft in product strategy discussions and help prioritize real-world attack complexity and operator efficiency.
Lead research into emerging attack vectors, exploitation techniques, AI-augmented adversarial methods, and tools.
Develop or contribute to open-source tooling, proprietary frameworks, and methodologies.
Represent Armadin through conference talks, published research, security community engagement, and technical leadership.
Communicate strategic security findings, risk narratives, and business implications to executive leadership and client C-suite stakeholders.
Contribute to hiring, interviewing, and technical assessment of prospective red team operators.
Pressure-test complete kill chains, identify limitations in the agent swarm, and help improve its expert reasoning and performance at scale.