Authentic8

Authentic8

Red Team Engineer/ Offensive Security Lead

Remote - United States

Work authorization required$150k-$175kDetected 13 days ago
PythonGitGCPDockerCI/CDLinuxLLMsCybersecurityPenetration TestingCommunicationCollaboration

About the role

  • Authentic8 Silo places any type of digital analyst in region-specific, multi-application workspaces, securely and anonymously, anywhere across the globe.
  • Silo transforms how more than 750 of the world's most sophisticated organizations, from domestic and foreign government agencies to commercial entities across all sectors conduct their digital investigations.

Responsibilities

  • Design, build, and operate an AI-augmented red teaming harness using frontier LLM APIs.
  • Implement a control loop architecture (Plan | Act | Observe | Adjust) for autonomous and semi-autonomous vulnerability discovery.
  • Validate and prioritize findings using CVSS, EPSS, and KEV context before handing off to the patch management pipeline.
  • Support the development and day-to-day operation of Authentic8's internal Bug Bounty Program.
  • Collaborate with engineering on custom mitigation decisions when vendor patches are unavailable.
  • Assume ownership of security stage-gates within our CI/CD pipeline, integrating Snyk, SonarQube, and harness findings into the build process.
  • Work alongside the SOC Lead on CVE monitoring, alerting, and vulnerability prioritization workflows.
  • Partner with DevSecOps Engineers on harness architecture and pipeline integration.
  • Provide technical input to the Integrated Operations Center on detection use case design for our SIEM.

Requirements

  • 5+ years in cybersecurity, penetration testing, or red team operations
  • Hands-on experience with LLM APIs in a security or agent context, including an understanding of tool use, control loops, and context management in agent architectures
  • Demonstrated experience building tools: scripting exploits, automating workflows, or constructing test harnesses (Python and/or Go strongly preferred)
  • Ability to work independently, manage your own scope, and deliver against defined milestones
  • Strongly Desired:
  • $150,000 - $175,000
  • Individual pay will be determined by location and additional factors, including job related skills, experience, and relevant education or training.
  • Authentic8 Core Values & Principles: Integrity: We apply our best efforts. We are honest with and accountable to others. Mission-Focused: We clearly define and communicate our goals and do not stray in the pursuit of our objective. Respect: We value and respect the ideas and experience our diverse backgrounds bring us. Positive consideration of differing viewpoints makes us stronger. We are collaborative: We recognize the best work is the product of teams. We must each be reliable and expect to rely on others. We are transparent: By operating with common information and understanding we ensure that we are aligned. We find innovative solutions: We seek innovative solutions not as a buzzword but as a means to solve difficult problems with zeal, efficiency and quality. We take ownership: We are responsible for our actions, our reputation and our business. Authentic8 offers competitive benefits, including medical, dental and vision, flexible PTO, a 401k program and stock options. It is the policy of Authentic8 to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law.

Skills

  • Proficiency with static and dynamic analysis (SAST/DAST) and the ability to interpret and chain findings from automated tooling
  • Working knowledge of CVE and vulnerability data sources, including NVD, EPSS, KEV, OSV.dev, and the GitHub Advisory Database
  • Experience testing cloud-hosted SaaS platforms (GCP familiarity preferred)
  • Familiarity with container security (containered, Docker) and Linux-based infrastructure
  • Excellent documentation and communication skills
  • Must be US citizen
  • At some point in any digital investigation, an analyst needs to step beyond the perimeter and engage threats at the source.
  • All delivered in a cloud-native, multi-tenant platform.

Compensation

  • Individual pay will be determined by location and additional factors, including job related skills, experience, and relevant education or training.
  • $150,000 - $175,000

Benefits

  • Regularly brief the VP of Information Security on findings, program health, and checkpoint criteria.
  • Authentic8 offers competitive benefits, including medical, dental and vision, flexible PTO, a 401k program and stock options.

Company info

  • Integrity: We apply our best efforts.
  • We are honest with and accountable to others.
  • By operating with common information and understanding we ensure that we are aligned.
  • We are responsible for our actions, our reputation and our business.

Visa & Work Authorization

  • Must be US citizen

This listing is sourced directly from Authentic8's careers page and normalized into a canonical job model.