Senior Security Engineer, Red Team

Nscale • Seattle, WA

1d • $160,000 - $190,000

About The Position

Nscale is hiring a Senior Security Engineer for its Red Team, part of the global CISO organisation. The role delivers offensive security campaigns across cloud, infrastructure, enterprise environments, identity systems, endpoints, and applications. It is hands-on and execution-focused, with responsibility for owning workstreams end to end across multiple parallel campaigns and partnering with Detection & Response and Security Engineering to turn findings into measurable improvements.

A core focus is using AI to improve red teaming. The engineer will work with frontier, cyber-gated, and open-weight models, along with agentic tools, and develop workflows to accelerate reconnaissance, vulnerability discovery, exploit development, attack-path analysis, and reporting. They will select models to balance quality, cost, and speed, and establish guardrails, logging, and human review to keep model-driven activity within scope and rules of engagement.

Nscale describes its environment as collaborative, supportive, innovative, and flexible, with autonomy for employees to shape their day. The role offers a US compensation package with base salary, bonus, and equity; the stated base salary range is $160,000–$190,000 USD. The package may also include medical, dental, and vision coverage, flexible paid time off, parental leave, and retirement plan participation.

Requirements

• At least 5 years of experience in red teaming, offensive security, or penetration testing.
• Proven experience conducting adversary simulations and complex attack chains.
• Hands-on experience applying large language models to offensive security work, including cyber-gated models.
• Experience building agentic workflows that orchestrate multiple models and tools, with judgment to balance model quality and cost.
• Strong expertise across network, application, cloud, and identity security, including experience in cloud environments and modern infrastructure.
• Deep understanding of MITRE ATT&CK and attacker methodologies, and hands-on experience with offensive tools and frameworks.
• Ability to own and deliver workstreams across several campaigns with limited supervision.
• Comfort pairing with teammates, giving and receiving review, and handing off work cleanly across campaigns.

Nice To Haves

• Experience in AI infrastructure or distributed systems environments.
• Experience evaluating model capability for cyber tasks or securing agentic systems against prompt injection and tool misuse.
• Familiarity with identity-based attacks, Kubernetes, containers, GPU-based infrastructure, purple teaming, detection engineering collaboration, or AI/ML system security testing.

Responsibilities

• Plan and execute red team campaigns and adversary simulations with the Red Team Lead and teammates.
• Own scope, timelines, evidence, and reporting for workstreams across multiple campaigns.
• Emulate real-world attacker behavior, including initial access, lateral movement, privilege escalation, and persistence, to identify weaknesses across infrastructure, identity systems, endpoints, and applications.
• Build agentic workflows that orchestrate multiple models and tools to accelerate offensive security work.
• Evaluate new models and tooling, including open-weight models, and integrate options that improve team throughput.
• Build guardrails, logging, and human review steps to keep model-driven activity within scope and rules of engagement.
• Perform penetration testing across applications, APIs, identity systems, and internal services.
• Develop and maintain offensive tools, scripts, and supporting infrastructure, increasingly model-driven.
• Apply modern offensive tools and frameworks, and share tooling, techniques, and playbooks with the team.
• Identify gaps in preventive controls, detection coverage, and response capabilities.
• Partner with Detection & Response to validate and improve detection logic and alerting, including through purple team exercises.
• Collaborate with Security Engineering to remediate vulnerabilities and strengthen system design.
• Document risk, impact, and remediation clearly, and communicate attack paths to support prioritization and action.
• Peer-review findings and reports, pair on complex attack paths, and contribute evidence-based recommendations to the team's roadmap.

Benefits

• Highly competitive US compensation package with base salary, bonus, and equity; performance reviews every 12 months.
• Flexible workplace and autonomy to shape the workday.
• Medical, dental, and vision coverage may be offered.
• Flexible paid time off may be offered.
• Parental leave may be offered.
• Retirement plan participation may be offered.
• Dynamic progression plan and opportunities to lead critical cross-functional initiatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed