Red Team Developer

The role

This person will develop offensive, production-ready attack capabilities for a specialized attack team. They will architect low-level attack components for evasion techniques, red team tooling, and adversary simulations.

What you will do

• Lead the design, development, and deployment of production-grade offensive capabilities targeting application and OS CVEs exploits
• Develop attack components for Windows/Linux including OS-level evasion mechanisms
• Implement Python bindings to connect native low-level components with Python-based research tools and automation
• Research and develop bypass techniques for modern security controls
• Collaborate with the Research Team and other R&D stakeholders to implement and refine offensive concepts
• Harness AI coding agents to streamline the above processes

Required qualifications

• 3+ years of hands-on experience in development of offensive attack components
• 3+ years of Python experience, especially for integrating with native modules and supporting research workflows
• Experience developing stealthy and evasive attack components, including in-memory execution and user/kernel-mode tooling
• Familiarity with EDR evasion, API hooking, and direct system call manipulation

Nice to have

• Deep knowledge of Windows/Linux APIs, security controls, and undocumented behaviors relevant to offensive security
• Experience with MITRE ATT&CK and implementing or simulating ATT&CK techniques
• Background in red teaming, adversary emulation, or APT simulation
• Prior contributions to offensive tooling or internal R&D platforms
• Understanding of modern threat actor TTPs and practical application in research environments

Benefits

• Competitive salary and equity grants
• Hybrid flexibility
• Quarterly recharge weekends
• Learning & development stipend
• Generous paid leave policies including flexible PTO and parental leave

Before you apply

• Complete an assignment to understand real scenarios
• Connect with CTO to discuss assignment
• Meet the team at the office

About the company

SafeBreach is a global leader in adversarial exposure validation (AEV) that helps organizations take command of risk through its CTEM Platform. The company is a team of security professionals and innovators.