Armadin
Senior Red Team Operator, Applications
Remote · Remote · Senior · Full-time · Posted Oct 14, 2026
- Visa sponsorship
- Must be eligible to work in the United States without sponsorship.
About the job
Conduct application-focused red-team operations, validate and explain attack paths, and translate expert tradecraft into safer, more capable AI agents for continuous offensive security.
What you'll do
- Attack web, mobile, API, and client applications; prove exploitability and trace impact across identity, cloud, and data.
- Encode tradecraft into AI-agent techniques and evaluation data, and pressure-test the agents’ attack paths.
- Build offensive tools, research emerging techniques, and deliver client-facing reports and debriefs.
What they ask for
- Hands-on web application and API exploitation beyond the OWASP Top 10, including business logic abuse, authentication or authorization bypass, and injection chains.
- Depth in at least one additional area: mobile, thick/thin clients, source code review, or reverse engineering.
- Strong understanding of network protocols, client-server architecture, and application vulnerabilities; proficiency with Linux, Windows, macOS, and scripting in Bash, Python, or similar.
- Must be eligible to work in the United States without sponsorship; able to travel up to 20%.
Nice to have
- Experience with offensive automation or AI/ML, such as agentic frameworks, ML-assisted fuzzing, or automated exploitation pipelines.
- Shipped offensive tooling; public application-security work; ongoing security practice; or relevant certifications.
Tools
Burp Suite, Caido, ZAP, Frida, jadx, Ghidra, IDA Pro, Python
AI focus
Use AI in security workflows and train, evaluate, and pressure-test AI agents that discover, exploit, and chain vulnerabilities.
Model-written summary · the original posting is authoritative