Offensive Security Engineer

The role

The Offensive Security Engineer will build scalable adversary emulation and research attacks against AI systems and data planes. This person will validate detections, reproduce emerging exploits, and partner with the SOC and customers to improve defensive capabilities.

What you will do

• Build scalable adversary emulation across cloud, identity, endpoint, SaaS, AI, and data environments
• Validate detections end to end by tracing emulated activity
• Research attacks against AI systems including prompt injection and tool abuse
• Research attacks against data planes including service identities and integration tokens
• Reproduce emerging exploits in isolated labs
• Enable safe testing in customer environments with control checks and cleanup
• Build continuous validation by integrating scenarios with detector tests
• Turn research into defensive improvements like detections and hunt logic
• Partner with the SOC and customers to run purple-team exercises

Required qualifications

• 5+ years of hands-on cybersecurity experience in offensive security, red teaming, adversary emulation, or security research
• Strong Python skills with experience building reusable security tools with APIs, SDKs, Git, code review, and automated testing
• Deep practical expertise in at least one cloud or identity ecosystem
• Practical web/API security knowledge and experience chaining weaknesses across authorization boundaries
• Experience reproducing attacks in controlled environments and connecting behavior to audit logs and detection logic
• Experience assessing AI applications or agent workflows, or demonstrated offensive research into these systems
• Sound judgment in sensitive environments to define scope and protect data
• Clear communication and the ability to own work from research through implementation

Nice to have

• Experience with Atomic Red Team, MITRE ATT&CK and ATLAS, purple teaming, or continuous security validation
• Experience with SQL, detection-as-code, and cloud, identity, SaaS, or endpoint telemetry
• Hands-on work with MCP servers, RAG systems, model gateways, or repeatable AI evaluations
• Experience assessing data warehouses, object storage, Kubernetes, CI/CD systems, or software supply chains
• Contributions to offensive tooling, emulation frameworks, detection content, or published security research

Benefits

• Make a real-world impact
• Build at the intersection of AI and security
• Own what you build
• Work closely with practitioners

About the company

Artemis is building the future of AI-driven cybersecurity to help companies defend themselves. The company is a fast-growing cybersecurity firm with customers including Fortune 500 companies and AI innovators.