Validate whether vulnerabilities and configuration weaknesses identified are reachable and practically exploitable.
Develop and execute realistic attack paths across web applications, APIs, cloud infrastructure, identity systems, endpoints, and other enterprise services.
Use AI-assisted and agentic techniques for reconnaissance, vulnerability analysis, attack-path discovery, and controlled offensive testing.
Test AI applications and agents for prompt injection, tool abuse, excessive privilege, identity compromise, and other emerging attack classes.
Validate compensating controls and mitigations before or after deployment.
Conduct purple-team exercises with Security Analytics and Security Operations to validate telemetry, detection, and response effectiveness.
Translate offensive findings into actionable improvements to architecture, configuration, detections, and response capabilities.
Qualifications
Experience in red teaming, penetration testing, adversary emulation, or offensive security engineering.
Strong web, API, cloud, identity, operating-system, and network security fundamentals.
Experience validating practical exploitability and developing realistic attack paths.
Strong understanding of MITRE ATT&CK and modern adversary techniques.
Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, and MITRE ATLAS.
Scripting or software-development experience.
Experience safely using automation or AI-assisted techniques in offensive-security workflows.
Experience assessing cloud-native or AI-enabled systems, conducting purple-team exercises, or simulating autonomous adversaries is preferred.
At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here.
At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer.
To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.
