{"id":3344583,"url":"https://alion.io/job/armadin-principal-red-team-operator","title":"Principal Red Team Operator","company":{"id":1825289,"name":"Armadin","domain":"armadin.com","url":"https://alion.io/company/armadin","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":7,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Field & Service","role_family":"Field & Service","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Palo Alto, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":60000,"max_usd":121000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1137},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"BloodHound","optional":false},{"name":"Burp Suite","optional":false},{"name":"Caido","optional":false},{"name":"Cobalt Strike","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"Frida","optional":false},{"name":"GCP","optional":false},{"name":"Ghidra","optional":false},{"name":"IDA Pro","optional":false},{"name":"Impacket","optional":false},{"name":"Linux","optional":false},{"name":"Metasploit","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-27T13:28:25Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-01T04:58:09Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About Us\nAt Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.\nWe're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.\nLed by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.\nRole Overview\nEvery operator knows the ending. You found the path, chained it to access the crown jewel, and wrote it up. Then the engagement closed, the environment changed the next week, and nobody walked that kill chain again until next year's test. Armadin is built to end that cycle.\nWe're building an agentic attacker swarm. These are specialized AI agents running custom models that discover, exploit, and chain vulnerabilities across external, internal, identity, cloud, and application attack surfaces. They run continuously, at machine speed, against live production environments. Until recently, nobody could put a nation-state-caliber adversary inside every network around the clock. That's the hyperattack, and it's what we do. In one recent engagement, the swarm generated more than 17 million offensive actions in three days and validated 38 attack paths. That's the scale your tradecraft will run at.\nAs a Principal Red Team Operator, your tradecraft is the training signal. You'll run hands-on operations, and then you'll encode how you think into the reasoning our agents use at scale: how you pick a foothold, abuse an application's logic, pivot through identity, separate what's actually exploitable from scanner noise, and map the blast radius once you're in. You'll pressure-test full kill chains end to end, find where the swarm is naive, and teach it to move like an expert, using AI throughout your own workflow to go faster and deeper.\nThe problems here are new ones:\nWhat does a kill chain look like when it can branch a thousand ways in parallel?\n\nHow do you prove exploitability instead of just flagging it?\n\nWhat does a continuous hyperattack find that a two-week engagement never could?\n\nYou'll work alongside operators who have spent decades on the front lines of red teaming and the AI engineers turning that experience into autonomous offense. It's a small, scrappy group with high ownership, and the work you ship reaches enterprises through industry leading partners. If you've ever finished an op thinking \"imagine running this everywhere, all the time,\" this is where you get to do it.\nWhat You’ll Do\nTechnical Leadership & Delivery\nExecute sophisticated multi-disciplinary red team engagements spanning application security, network penetration testing, cloud infrastructure, and identity systems - combining expertise across attack vectors into cohesive, high-impact campaigns.\n\nIdentify novel attack chains and weaknesses that transcend traditional security boundaries, conducting source code review, network analysis, binary reverse engineering, and infrastructure assessment in concert to uncover business-critical security gaps.\n\nDevelop comprehensive, technically rigorous reports and executive briefings that translate complex offensive findings into clear remediation roadmaps and risk narratives for both technical and non-technical stakeholders.\n\nConduct advanced threat analysis and intelligence gathering to understand the full attack landscape of enterprise environments, including adversarial TTPs, business risk, and compliance implications.\n\nShare tradecraft, tool development insights, and lessons learned from complex engagements to elevate team capability and establish Armadin as a center of offensive security excellence.\n\nStrategic Innovation & Product Collaboration\nWork closely with product engineering and AI teams - including onsite collaboration - to translate red team needs, methodologies, and adversarial insights into platform capabilities, tool integrations, and AI-driven attack simulations.\n\nServe as the voice of offensive security tradecraft in product strategy discussions, ensuring platform development prioritizes real-world attack complexity and operator efficiency.\n\nLead research initiatives into emerging attack vectors, exploitation techniques, AI-augmented adversarial methodologies, and novel tools to maintain Armadin's position at the forefront of offensive security.\n\nDevelop and contribute to open-source tooling, proprietary frameworks, and methodologies that enhance Armadin's capabilities and influence the broader security community.\n\nIndustry & Internal Leadership\nRepresent Armadin as a thought leader in offensive security through conference talks, published research, security community engagement, and technical leadership.\n\nInterface directly with executive leadership and client C-suite to communicate strategic security findings, risk narratives, and business-level implications.\n\nContribute to hiring, interviewing, and technical assessment of prospective red team operators to build world-class offensive security talent.\n\nWhat You’ll Bring\nExperience & Expertise\n8+ years of hands-on offensive security experience, including extensive depth in multiple disciplines:\nAdvanced web application penetration testing and secure code review (OWASP Top 10, business logic flaws, authentication/authorization bypass, API security, control flow analysis)\n\nNetwork penetration testing, Active Directory attacks, lateral movement, privilege escalation, and persistence operations across enterprise infrastructure\n\nMobile application security assessments, thick/thin client reverse engineering, and binary analysis across platforms (iOS, Android, Windows, macOS, Linux)\n\nCloud infrastructure security, identity systems (Kerberos, SAML, OAuth), and multi-cloud red team operations\n\nDemonstrated ability to integrate findings across multiple attack surfaces into comprehensive, strategic offensive campaigns\n\nTechnical Proficiency\nExpert-level proficiency with offensive security tools across multiple domains (Burp Suite, OWASP ZAP, Caido, Nmap, Metasploit, Cobalt Strike, Impacket, BloodHound, Responder, CrackMapExec, Frida, Ghidra, IDA Pro, etc.)\n\nAdvanced scripting and tool development in Python, Bash, PowerShell, or compiled languages; ability to extend C2 frameworks, develop custom exploits, and create application-specific tooling\n\nDeep understanding of network protocols, packet-level analysis, cryptography, system architecture (Windows, Unix/Linux, cloud platforms), and application design patterns\n\nProficiency in multiple operating systems and platforms (Windows, Linux, macOS), container technologies, and cloud environments (AWS, Azure, GCP)\n\nRequirements\nWillingness to work onsite in our Palo Alto, CA office to collaborate with product engineering teams, support complex engagements, and participate in strategic initiatives\n\nExceptional written and verbal communication skills - capable of translating complex technical concepts for executive leadership, product teams, and diverse client audiences\n\nStrategic thinking and the ability to align technical initiatives with business objectives; experience influencing product roadmaps or organizational strategy\n\nExperience providing technical mentorship and guidance\n\nEven Better With\nPrior experience working alongside AI/ML models, automated offensive security frameworks, or building AI-augmented attack tools\n\nPublished research, conference speaking, or significant open-source contributions in offensive security\n\nExperience in startup or high-growth environments; demonstrated ability to wear multiple hats and drive initiatives with minimal bureaucracy\n\nAdvanced certifications: OSCP, OSCE, CRTE, CRTO, or equivalent elite-level credentials\n\nTrack record of building offensive security tools or frameworks adopted by the community\n\nLocation\nOnsite in Palo Alto, CA\nBenefits & Perks | FTE\nFull Health, Dental, & Vision Coverage\nMeaningful Equity Ownership\nIn-Office Meals\nHaircuts at the Office\nCompany Sponsored Conferences & Events\n401(k), HSA, and FSA Plans\nFlexible PTO","description_format":"text","description_chars":8484,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Office meals"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Security Operations","Cybersecurity AI"],"lifecycle":[{"event":"open","at":"2026-10-27T16:47:22Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 12","filings_12m":12,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":207917,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":32,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/armadin-principal-red-team-operator","json_url":"https://alion.io/job/armadin-principal-red-team-operator.json","meta":{"generated_at":"2026-11-01T07:31:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11596,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1825289},"rest":"https://alion.io/mcp/rest/get_company?id=1825289"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Farmadin-principal-red-team-operator"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Farmadin-principal-red-team-operator"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Farmadin-principal-red-team-operator"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/armadin-principal-red-team-operator\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Farmadin-principal-red-team-operator"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3344583}},{"tool":"search_jobs","arguments":{"company":"armadin.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3344583},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}