Senior Red Team Engineer - Frontier AI Security (Remote US)

This is a remote US position. Candidates must be legally authorized to work in the United States and will not require sponsorship now or in the future.

The Team

At Hitachi Vantara, our Security team is dedicated to protecting the organization's people, products, platforms, and customers through proactive cybersecurity practices. The team partners closely with engineering, cloud operations, product development, and security stakeholders to identify and mitigate risks across a global technology landscape. As a collaborative and highly skilled group, we continuously evolve our capabilities to stay ahead of emerging threats, drive security best practices, and foster a culture of resilience and innovation.

The Role

As a Senior Red Team Engineer, you will lead advanced security assessments across web applications, APIs, network infrastructure, cloud platforms, and enterprise systems. You will identify vulnerabilities, validate security controls, and provide actionable recommendations to strengthen our security posture. This role combines hands-on penetration testing, red team activities, vulnerability research, and custom tool development to uncover and simulate real-world attack scenarios. You will collaborate with cross-functional teams to assess risks, support remediation efforts, and improve security-by-design practices. As a senior member of the team, you will also mentor colleagues, contribute to security standards and methodologies, and provide subject matter expertise during security incidents. Success in this role requires deep technical expertise, curiosity, strong communication skills, and the ability to translate complex findings into meaningful business outcomes.

What You´ll Bring

• AI-Driven Penetration Testing: Apply frontier AI models to enhance penetration testing, vulnerability discovery, attack-path analysis, and other offensive-security activities.
• AI Security Tool Development: Develop AI-powered tools and workflows that improve how security teams leverage AI models, increasing the effectiveness, consistency, and automation of daily security activities.
• 7+ years of experience in information security, including 4+ years focused on penetration testing.
• Proven expertise conducting penetration tests across web applications, APIs, networks, cloud environments, and enterprise infrastructure.
• Strong knowledge of penetration testing methodologies, attack frameworks, and tools such as Burp Suite.
• Deep understanding of common application and infrastructure vulnerabilities, including the OWASP Top 10.
• Experience performing cloud security assessments in AWS, Azure, and/or Google Cloud Platform.
• Proficiency in scripting or development languages such as Python, PowerShell, Ruby, or similar for automation and tool development.
• Knowledge of Active Directory security, privilege escalation, lateral movement, and post-exploitation techniques.
• Experience with containerized and modern application environments, including Docker and Kubernetes.
• Excellent analytical, problem-solving, and technical reporting skills, with the ability to communicate effectively to both technical and non-technical audiences.
• Relevant certifications such as OSCP, OSCE, GPEN, GWAPT, GXPN, GIAC, or equivalent security credentials preferred.

Certifications

• Relevant certifications such as OSCP, OSCE, GPEN, GWAPT, GXPN, GIAC, or equivalent.
• OffSec AI Red Teamer (OSAI / AI-300) - Preferred
• Certified AI Security Professional (CAISP) - Preferred
• SANS SEC536: Adversarial AI - Penetration Testing AI Systems - Highly Relevant Training

As required by the equal pay and transparency acts, the expected base salary for this position is: $120K to $150K. The expected on-target earnings for this position is: $136k to $170k.

The expected pay is determined based on a variety of factors including, but not limited to, depth of experience in the practice area. Employees are eligible to participate in Hitachi Vantara's bonus/variable/commission pay programs, where applicable, and are subject to the program's conditions and restrictions.

#LI-JS2