Senior Red Team Operator, Applications

Senior Red Team Operator: Shape the Future of Autonomous Offense with Armadin

Are you an elite Red Team Operator who's ever imagined your tradecraft running continuously, at machine speed, against live production environments? Do you want to move beyond annual engagements and engineer offensive capabilities that redefine proactive security in the AI era?

At Armadin, we're not just reacting to threats; we're building the future of defense by empowering organizations to anticipate and neutralize cyberattacks before they materialize. Led by cybersecurity visionary Kevin Mandia (founder of Mandiant, acquired by Google for $5.4B), our team comprises engineers and researchers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT. We're on a mission to bring autonomous proactive security to the world's most critical institutions.

We're building this from the ground up, embedding the nuanced tradecraft of the world's best security practitioners into purpose-built AI models and agents. These agents discover, exploit, and remediate risk at an unprecedented scale.

The Mission: Empower an Agentic Attacker Swarm

Every operator knows the cycle: find the path, chain to the crown jewel, write the report, then watch the environment change before the next test. At Armadin, we're ending that cycle.

We're developing an agentic attacker swarm—specialized AI agents powered by custom models that continuously discover, exploit, and chain vulnerabilities across external, internal, identity, cloud, and application attack surfaces. This isn't theoretical; these agents run relentlessly, at machine speed, against live production environments. This "hyperattack" capability puts a nation-state-caliber adversary inside every network, around the clock. Imagine the impact: in one recent engagement, our swarm executed over 17 million offensive actions in three days, validating 38 complex attack paths. This is the scale your expertise will drive.

As a Senior Red Team Operator, your invaluable tradecraft is our training signal. You'll execute hands-on operations, then translate your strategic thinking into the reasoning our AI agents use at scale. Teach the swarm how to select a foothold, abuse application logic, pivot through identity, distinguish true exploitability from scanner noise, and accurately map the blast radius. You’ll rigorously pressure-test full kill chains, identify the swarm's blind spots, and refine its movements to mimic an expert operator, all while leveraging AI within your own workflow to achieve unprecedented speed and depth.

You'll be at the forefront of solving entirely new challenges:

What does a kill chain look like when it can branch a thousand ways in parallel?
How do we move beyond flagging vulnerabilities to definitively proving exploitability?
What does a continuous hyperattack uncover that a traditional two-week engagement never could?

You'll collaborate with red team legends who have spent decades on the front lines and AI engineers transforming that experience into autonomous offense. We're a small, high-ownership team, and the capabilities you ship will directly impact enterprises through industry-leading partners. If you've ever dreamt of running your best op "everywhere, all the time," Armadin is where you make it happen.

What You'll Do

Execute Full Kill Chains: Attack web, mobile, API, and thick/thin client applications like a real adversary, hunting logic flaws and chaining weaknesses into paths scanners often miss.
Prove Exploitability: Convert candidate findings into validated exploits with clear evidence, clearly distinguishing real risk from noise.
Map the Blast Radius: Follow every foothold to its logical conclusion—from application compromise to identity, cloud, and data—demonstrating the attacker's true reach.
Read Code Like an Attacker: Perform source code review across various languages and frameworks for control-flow flaws, injection paths, and insecure design, leveraging AI-assisted analysis for enhanced speed and coverage.
Deconstruct Applications: Employ static and dynamic analysis, binary reversing, runtime instrumentation, and API testing to deeply understand application mechanics.
Train the Swarm: Translate your red team tradecraft into the techniques, decision logic, and evaluation data that enable our AI agents to operate like expert operators at machine speed.
Challenge the Machine: Pressure-test the swarm's attack paths, pinpoint its naive or incorrect assumptions, and make the critical human-in-the-loop decisions that ensure safe and accurate autonomous operations.
Build Custom Tools: Develop scripts, tools, and plugins to extend Armadin's offensive capabilities, treating AI as a daily force multiplier in your personal workflow.
Narrate the Attack: Deliver comprehensive reports and debriefs that effectively communicate the attack narrative, business risk, and remediation steps to engineers, executives, and legal counsel.
Innovate and Anticipate: Research emerging vulnerability classes, exploitation techniques, and AI-driven attacker tradecraft, directly feeding your insights into the platform.
Own Your Impact: Manage concurrent operations and internal research with startup-level autonomy, rapidly adapting priorities as the threat landscape evolves.

What You'll Bring (Your Core Skills)

Deep, Hands-on Application Offense: Proven experience with web app and API exploitation beyond the OWASP Top 10, including business logic abuse, authentication and authorization bypass, and complex injection chains.
Depth in at least one additional attack surface:

Mobile (iOS and/or Android): Reversing APKs and IPAs, runtime hooking, insecure storage, and traffic interception.
Thick/Thin Clients: Desktop applications, client-server protocols, and memory analysis.
Source Code Review: Expertise in identifying control-flow issues, injection paths, and insecure design patterns.
Reverse Engineering: Proficiency with applications, obfuscators, and custom encryption schemes.

Attacker's Toolkit Mastery: Fluency with industry-standard tools like Burp Suite, Caido, ZAP, Frida, jadx, Ghidra, and IDA Pro, coupled with the critical judgment to know when the tool falls short.
Systems Understanding for Chaining: Strong grasp of network protocols, client-server architectures, and the full spectrum of application vulnerability classes, understanding how one weakness leads to the next.
Multi-OS Proficiency: Comfort and expertise across Linux, Windows, and macOS, with scripting capabilities in Bash, Python, or similar languages.
An AI-Forward Mindset: You actively use AI tools to accelerate recon, analysis, or tooling in your current work, and you're eager to push these boundaries much further.
Sharp Human-in-the-Loop Judgment: Ability to quickly absorb new information, make time-sensitive decisions under pressure, and clearly articulate your reasoning to safety and engineering teams.
Builder's Startup Mentality: You are scrappy, self-directed, comfortable with ambiguity, and prioritize shipping valuable solutions over rigid processes.
Clear Client Communication: Aptitude for translating complex attack chains for diverse audiences (engineers, executives, legal counsel) during engagements and remediation debriefs.
Logistics: Eligible to work in the United States without sponsorship. Ability to travel up to 20% for on-site engagements or client meetings.

Even Better (Bonus Points)

Offensive Automation & AI/ML Exposure: Experience building agentic frameworks, ML-assisted fuzzing, or automated exploitation pipelines.
Shipped Offensive Tooling: Development of Burp or Caido extensions, impactful open-source offensive projects, or custom frameworks adopted by others.
Public Contributions: Track record of bug bounty findings, CVEs, CTF wins, or conference talks focused on application security.
Continuous Skill Development: Active engagement with platforms like PortSwigger Web Security Academy, Hack The Box, or TryHackMe.
Relevant Certifications: Such as OSWE, Burp Suite Certified Practitioner, GWAPT, CWES, eWPTX, eMAPT, or the TCM Practical Web and Mobile Pentest tracks.

Location
Remote in United States

Benefits & Perks (For Full-Time Employees)
We believe in supporting our team to do their best work and live their best lives.

🏥 Comprehensive Health, Dental, & Vision Coverage
📈 Meaningful Equity Ownership in a rapidly growing startup
🥙 In-Office Meals (for those near our hub)
✂️ Convenient Haircuts at the Office (for those near our hub)
🎉 Company Sponsored Conferences & Events
💸 401(k), Health Savings Account (HSA), and Flexible Spending Account (FSA) Plans
🌴 Flexible Paid Time Off (PTO)