[Hiring] Senior Red Team Operator @Armadin

Role Description

As a Senior Red Team Operator, your tradecraft is the training signal. You'll run hands-on operations, and then you'll encode how you think into the reasoning our agents use at scale:

• Run full kill chains, not checklists.
• Attack web, mobile, API, and thick/thin client applications the way a real adversary would, hunting logic flaws and chaining weaknesses into paths scanners never see.
• Prove what's exploitable.
• Turn candidate findings into working exploitation with clear evidence, and separate real risk from noise.
• Map the blast radius.
• Follow every foothold to its end, from application compromise to identity, cloud, and data, and show what an attacker could actually reach.
• Read code like an attacker.
• Review source across languages and frameworks for control-flow flaws, injection paths, and insecure design, using AI-assisted analysis to cover more ground faster.
• Take applications apart.
• Use static and dynamic analysis, binary reversing, runtime instrumentation, and API testing to get under the hood of how things really work.
• Train the swarm.
• Translate your tradecraft into the techniques, decision logic, and evaluation data that make our AI agents operate like expert operators at machine speed.
• Break the machine.
• Pressure-test the swarm's attack paths, spot where it's naive or wrong, and make the human-in-the-loop calls that keep autonomous operations safe and accurate.
• Build what's missing.
• Write scripts, tools, and plugins that extend Armadin's offensive capabilities, and treat AI as a daily force multiplier in your own workflow.
• Tell the attack story.
• Deliver reports and debriefs that walk engineers, executives, and counsel through the attack narrative, the business risk, and the fix.
• Stay ahead of the threat.
• Research emerging vulnerability classes, exploitation techniques, and AI-driven attacker tradecraft, and feed what you learn straight into the platform.
• Own your work.
• Balance concurrent operations and internal research with startup-level autonomy, shifting priorities as fast as the threat does.

Qualifications

• Deep, hands-on application offense.
• Web app and API exploitation beyond the OWASP Top 10, including business logic abuse, authentication and authorization bypass, and injection chains.
• Depth in at least one more attack surface:
• Mobile (iOS and/or Android): reversing APKs and IPAs, runtime hooking, insecure storage, and traffic interception.
• Thick/thin clients: desktop apps, client-server protocols, and memory analysis.
• Source code review: control-flow issues, injection paths, and insecure design patterns.
• Reverse engineering: applications, obfuscators, and custom encryption schemes.
• An attacker's toolkit and the instinct to go beyond it.
• Fluency with tools like Burp Suite, Caido, ZAP, Frida, jadx, Ghidra, and IDA Pro, plus the judgment to know when the tool is wrong.
• Systems understanding that makes chaining possible.
• Strong grasp of network protocols, client-server architecture, and the full range of application vulnerability classes, and how one leads to the next.
• Comfort everywhere you land.
• Proficiency across Linux, Windows, and macOS, with scripting in Bash, Python, or similar.
• An AI-forward way of working.
• Sharp human-in-the-loop judgment.
• A builder's, startup mindset.
• Clear communication with clients.

Requirements

• Must be eligible to work in the United States without sponsorship.
• Ability to travel up to 20% for on-site engagements or client meetings.

Benefits

• 🏥 Full Health, Dental, & Vision Coverage
• 📈 Meaningful Equity Ownership
• 🥙 In-Office Meals
• ✂️ Haircuts at the Office
• 🎉 Company Sponsored Conferences & Events
• 💸 401(k), HSA, and FSA Plans
• 🌴 Flexible PTO