Senior Security Engineer, Red Team

Nscale • San Francisco, NY

20h

About The Position

Nscale is hiring a Senior Security Engineer for its Red Team within the global CISO organisation. The role works closely with the Red Team Lead and teammates to deliver offensive security campaigns across cloud, infrastructure, enterprise environments, identity systems, endpoints, and applications. It is a hands-on, execution-focused position involving several campaigns in parallel, with ownership of workstreams from planning through reporting and collaboration with Detection & Response and Security Engineering to turn findings into measurable improvements.

A key focus is applying AI to red teaming. The engineer will work with frontier, cyber-gated, and open-weight models, as well as agentic tools, to create workflows that accelerate reconnaissance, vulnerability discovery, exploit development, attack-path analysis, and reporting. The role includes selecting models to balance quality, cost, and speed, and building guardrails, logging, and human review steps to ensure model-driven work follows scope and rules of engagement.

Nscale describes its culture as collaborative, supportive, innovative, and grounded in ownership, accountability, openness, and transparency. The role offers a flexible workplace and autonomy in shaping the workday. Compensation includes a stated base salary range, with possible bonus, equity, and/or commission programs; Nscale may also offer medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.

Requirements

• At least 5 years of experience in red teaming, offensive security, or penetration testing.
• Proven experience conducting adversary simulations and complex attack chains.
• Hands-on experience applying large language models to offensive security work, including cyber-gated models.
• Experience building agentic workflows that orchestrate multiple models and tools, with sound judgment in selecting models to balance quality and cost.
• Strong expertise across network, application, cloud, and identity security, with experience working in cloud environments and modern infrastructure.
• Deep understanding of MITRE ATT&CK and attacker methodologies, and hands-on experience with offensive tools and frameworks.
• Ability to own and deliver workstreams across several campaigns with limited supervision.
• Comfort pairing with teammates, giving and receiving review, and handing off work cleanly across campaigns.

Nice To Haves

• Experience in AI infrastructure or distributed systems environments.
• Experience evaluating model capability for cyber tasks or securing agentic systems against prompt injection and tool misuse.
• Familiarity with identity-based attacks, Kubernetes, containers, GPU-based infrastructure, purple teaming, detection engineering collaboration, or AI/ML system security testing.

Responsibilities

• Plan and execute red team campaigns and adversary simulations with the Red Team Lead and teammates.
• Own scope, timelines, evidence, and reporting for workstreams across multiple campaigns.
• Emulate real-world attacker behavior, including initial access, lateral movement, privilege escalation, and persistence, to identify weaknesses in infrastructure, identity systems, endpoints, and applications.
• Build agentic workflows that orchestrate multiple models and tools to accelerate offensive security work.
• Evaluate new models and tooling, including open-weight models, and integrate those that improve team throughput.
• Build guardrails, logging, and human review steps to keep model-driven activity within scope and rules of engagement.
• Perform penetration testing across applications, APIs, identity systems, and internal services.
• Develop and maintain offensive tools, scripts, and supporting infrastructure, increasingly model-driven.
• Apply modern offensive tools and frameworks, and share tooling, techniques, and playbooks with the team.
• Identify gaps in preventive controls, detection coverage, and response capabilities.
• Partner with Detection & Response to validate and improve detection logic and alerting, including through purple team exercises.
• Collaborate with Security Engineering to remediate vulnerabilities and strengthen system design.
• Document risk, impact, and remediation clearly, and communicate attack paths to support prioritisation and action.
• Peer-review findings and reports, pair on complex attack paths, and contribute evidence-based recommendations to the team's roadmap.

Benefits

• Highly competitive US compensation package with base salary, bonus, and equity; compensation may also include commission programs.
• Performance reviews every 12 months.
• Flexible workplace with autonomy to shape the workday.
• Nscale may offer medical, dental, and vision coverage.
• Nscale may offer flexible paid time off.
• Nscale may offer parental leave.
• Nscale may offer retirement plan participation.
• Dynamic progression plan and opportunities to lead critical cross-functional initiatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed