Security Engineer, Red Team

Whatnot, Remote (US)

The role

Plan and run authorized red team operations across cloud (AWS), Kubernetes, networks, identity systems, SaaS, and internal applications, under written rules of engagement.
Build and maintain AI-assisted testing harnesses: agent loops that run recon, attack-path discovery, fuzzing, and exploit validation with logging, scoping controls, and human approval gates.
Use LLMs and agentic tools to speed up vulnerability research, payload and test-case generation, code review, and report drafting, and measure where they help and where they mislead.
Red team our own AI systems: prompt injection, tool and connector abuse, data exfiltration, model and agent permission boundaries, and supply chain risk in AI dependencies.

Whatnot, Remote (US)

Plan and run authorized red team operations across cloud (AWS), Kubernetes, networks, identity systems, SaaS, and internal applications, under written rules of engagement.
Build and maintain AI-assisted testing harnesses: agent loops that run recon, attack-path discovery, fuzzing, and exploit validation with logging, scoping controls, and human approval gates.
Use LLMs and agentic tools to speed up vulnerability research, payload and test-case generation, code review, and report drafting, and measure where they help and where they mislead.
Red team our own AI systems: prompt injection, tool and connector abuse, data exfiltration, model and agent permission boundaries, and supply chain risk in AI dependencies.