{"id":3731536,"url":"https://alion.io/job/alteryx-principal-offensive-security-engineer","title":"Principal Offensive Security Engineer","company":{"id":4949,"name":"Alteryx","domain":"alteryx.com","url":"https://alion.io/company/alteryx","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":79,"open_postings":6,"ghost_share":0,"stale_share":0.833,"repost_share":0,"time_to_fill_p50_days":47,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Irvine, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":183000,"max":200000,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Alteryx","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"Kubernetes","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Agentic Workflows","optional":true},{"name":"AI Agents","optional":true},{"name":"LLM","optional":true}],"status":"live","first_seen_at":"2026-11-03T00:00:00Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-06T03:13:55Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Meet the Moment with Alteryx\nWe're living through a once-in-a-generation shift in how work gets done. Data, automation, and AI are quickly becoming the center of every business decision - and Alteryx is leading the transformation.\nYou'll be working on the challenges that sit at the heart of modern business. No matter your role, the work you do will help organizations move faster, see more clearly, and tackle questions that used to feel impossible.\nIf you're ready to meet the moment with innovation, curiosity, and excellence, there's a place for you here.\nPrincipal Offensive Security Engineer\nAlteryx is searching for a Principal Offensive Security Engineer in the United States. Join a team that values diverse perspectives, technical curiosity, and collaboration to improve the security of our products and enterprise environments.\nPosition Overview\nAs a Principal Offensive Security Engineer, you will serve as a senior technical leader within Alteryx’s Offensive Security program. You will lead risk-prioritized penetration testing, red-team engagements, and adversary simulations across product and enterprise environments.\nThis is a highly hands-on role. You will personally scope and execute complex engagements while setting technical direction, improving testing methods, and mentoring other practitioners.\nA key focus of this role will be the practical use of artificial intelligence in offensive security. You will develop and evaluate AI-assisted workflows that improve offensive testing and operational effectiveness.\nYou will also partner closely with Security Operations, Detection Engineering, Incident Response, Application Security, Cloud Security, IT, and Engineering to validate defensive controls and improve Alteryx’s ability to detect and respond to realistic adversary behavior.\nPrimary Responsibilities\nLead risk-prioritized penetration testing and offensive security assessments across products, web applications, APIs, infrastructure, cloud, identity, SaaS, and enterprise technologies.\nIdentify, validate, and safely exploit vulnerabilities and demonstrate how weaknesses can be chained into realistic attack paths.\nScope, design, and execute red-team campaigns and adversary simulations based on relevant threats, emerging techniques, and business risk.\nDevelop, validate, and incorporate AI-assisted workflows into offensive security activities, such as reconnaissance, campaign development, social engineering, tooling, and analysis.\nDevelop custom scripts, tooling, payloads, and automation to support offensive security engagements.\nConduct offensive security and red-team assessments with a primary focus on GCP and modern identity platforms, extending testing to AWS, Azure, and Kubernetes as relevant.\nPartner with SOC, Detection Engineering, Threat Hunting, and Incident Response teams to plan and execute purple-team exercises that validate telemetry, detections, investigation workflows, and response capabilities.\nPartner with engineering and defensive teams to prioritize remediation, retest fixes, and verify improvements to detections, logging, monitoring, playbooks, and defensive controls.\nClearly document findings, attack paths, business impact, and recommended remediation, and communicate results to both technical and executive audiences.\nOwn the technical direction and execution of the offensive security roadmap in partnership with security leadership. Mature testing methodologies and provide hands-on mentorship and technical pairing to other offensive security practitioners.\nMeasure program effectiveness through verified remediation, reduced exposure to critical attack paths, and repeatable validation of detection and response coverage.\nRequired Qualifications\nBachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent experience.\n8+ years of relevant information security experience, including significant hands-on experience in penetration testing, red teaming, adversary simulation, or offensive security.\nDemonstrated experience independently leading complex penetration tests or offensive security engagements.\nDeep hands-on expertise in one or more core domains, such as application/API exploitation, cloud offensive security, identity, or enterprise environments, with practical working knowledge across other domains and the ability to chain weaknesses into realistic attack paths and assess business impact.\nStrong knowledge of attacker techniques across initial access, credential access, privilege escalation, persistence, lateral movement, defense evasion, and data access.\nHands-on offensive security experience in at least one major cloud platform (GCP, AWS, or Azure) and modern identity environments, including technologies such as Active Directory, SAML, OAuth, OIDC, MFA, and SSO.\nExperience with modern offensive security tooling and frameworks across web, identity, network, and adversary-emulation testing.\nAbility to develop or modify offensive security tooling using languages such as Python, PowerShell, Bash, Go, or similar.\nDemonstrated hands-on experience incorporating AI into offensive security or red-team operations, with concrete examples of workflows or tools you developed or adapted, how you validated the results, and the operational benefits achieved.\nDemonstrated experience planning or leading purple-team exercises and translating offensive findings into defensive improvements.\nStrong understanding of MITRE ATT&CK and the ability to map offensive activity to adversary techniques and defensive coverage.\nExcellent written and verbal communication skills, including the ability to communicate technical risk to engineering teams, security leadership, and executives.\nDemonstrated experience mentoring offensive security engineers, setting technical direction, and influencing outcomes across engineering and security teams.\nPreferred Qualifications\nContributions to the offensive security or AI security community through conference presentations, open-source tooling, published research, vulnerability disclosures, or participation in industry working groups.\nExperience building or maturing an internal red-team or offensive security program.\nExperience conducting advanced adversary-emulation or assumed-breach exercises.\nExperience building AI integrations using agent frameworks, LLM APIs, or local or hosted models.\nExperience assessing AI-enabled applications, LLM-integrated systems, or agentic workflows.\nAdditional depth in SaaS security, endpoint/EDR evasion, exploit development, or social engineering.\nExperience designing repeatable purple-team validation programs.\nStrong hands-on offensive security experience in GCP; experience assessing Kubernetes environments is also preferred.\nRelevant practical offensive security certifications such as OSCP, OSEP, OSWE, OSED, CRTO, GXPN, or comparable certifications.\nAlteryx is committed to fair, equitable, and transparent compensation. Final compensation will be determined by various factors such as your relevant work experience, education, certifications, skills, and geographic location.\nThe salary range for this role in the United States is $183,000 - $200,000.\nEmployees may also be eligible for a wide range of other benefits, such as a bonus or commission, medical, retirement, financial, wellness, time off, employee discounts, and others.\nInterested? Learn more and apply today at alteryx.com/careers!\nFind yourself checking a lot of these boxes but doubting whether you should apply? At Alteryx, we support a growth mindset for our associates through all stages of their careers. If you meet some of the requirements and you share our values, we encourage you to apply. As part of our ongoing commitment to a diverse, equitable, and inclusive workplace, we’re invested in building teams with a wide variety of backgrounds, identities, and experiences.\nBenefits & Perks:\nAlteryx has amazing benefits for all Associates which can be viewed here.\nFor roles in San Francisco and Los Angeles: Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Alteryx will consider for employment qualified applicants with arrest and conviction records.\nThis position involves access to software/technology that is subject to U.S. export controls. Any job offer made will be contingent upon the applicant’s capacity to serve in compliance with U.S. export controls.","description_format":"text","description_chars":8431,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Data Integration & ETL Tools","Data Science & Notebook Platforms"],"lifecycle":[{"event":"open","at":"2026-11-04T08:27:06Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 8 · green card filings: 4","filings_12m":8,"filings_prev_12m":9,"green_card_filings_12m":4,"median_offered_wage_usd":185833,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":47,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":true},"html_url":"https://alion.io/job/alteryx-principal-offensive-security-engineer","json_url":"https://alion.io/job/alteryx-principal-offensive-security-engineer.json","meta":{"generated_at":"2026-11-06T06:23:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11157,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4949},"rest":"https://alion.io/mcp/rest/get_company?id=4949"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Falteryx-principal-offensive-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Falteryx-principal-offensive-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Falteryx-principal-offensive-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/alteryx-principal-offensive-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Falteryx-principal-offensive-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3731536}},{"tool":"search_jobs","arguments":{"company":"alteryx.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3731536},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}