{"id":2569428,"url":"https://alion.io/job/armadin-senior-red-team-operator-applications","title":"Senior Red Team Operator, Applications","company":{"id":1825289,"name":"Armadin","domain":"armadin.com","url":"https://alion.io/company/armadin","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Field & Service","role_family":"Field & Service","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":75000,"max_usd":147000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":316},"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"Bash","optional":false},{"name":"Burp Suite","optional":false},{"name":"Caido","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"Frida","optional":false},{"name":"Ghidra","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"IDA Pro","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-14T21:38:27Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-21T02:56:01Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"About Us\nAt Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.\nWe're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.\nLed by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.\nRole Overview\nEvery operator knows the ending. You found the path, chained it to access the crown jewel, and wrote it up. Then the engagement closed, the environment changed the next week, and nobody walked that kill chain again until next year's test. Armadin is built to end that cycle.\nWe're building an agentic attacker swarm. These are specialized AI agents running custom models that discover, exploit, and chain vulnerabilities across external, internal, identity, cloud, and application attack surfaces. They run continuously, at machine speed, against live production environments. Until recently, nobody could put a nation-state-caliber adversary inside every network around the clock. That's the hyperattack, and it's what we do. In one recent engagement, the swarm generated more than 17 million offensive actions in three days and validated 38 attack paths. That's the scale your tradecraft will run at.\nAs a Senior Red Team Operator, your tradecraft is the training signal. You'll run hands-on operations, and then you'll encode how you think into the reasoning our agents use at scale: how you pick a foothold, abuse an application's logic, pivot through identity, separate what's actually exploitable from scanner noise, and map the blast radius once you're in. You'll pressure-test full kill chains end to end, find where the swarm is naive, and teach it to move like an expert, using AI throughout your own workflow to go faster and deeper.\nThe problems here are new ones:\nWhat does a kill chain look like when it can branch a thousand ways in parallel?\n\nHow do you prove exploitability instead of just flagging it?\n\nWhat does a continuous hyperattack find that a two-week engagement never could?\n\nYou'll work alongside operators who have spent decades on the front lines of red teaming and the AI engineers turning that experience into autonomous offense. It's a small, scrappy group with high ownership, and the work you ship reaches enterprises through industry leading partners. If you've ever finished an op thinking \"imagine running this everywhere, all the time,\" this is where you get to do it.\nWhat You'll Do\nRun full kill chains, not checklists. Attack web, mobile, API, and thick/thin client applications the way a real adversary would, hunting logic flaws and chaining weaknesses into paths scanners never see.\n\nProve what's exploitable. Turn candidate findings into working exploitation with clear evidence, and separate real risk from noise.\n\nMap the blast radius. Follow every foothold to its end, from application compromise to identity, cloud, and data, and show what an attacker could actually reach.\n\nRead code like an attacker. Review source across languages and frameworks for control-flow flaws, injection paths, and insecure design, using AI-assisted analysis to cover more ground faster.\n\nTake applications apart. Use static and dynamic analysis, binary reversing, runtime instrumentation, and API testing to get under the hood of how things really work.\n\nTrain the swarm. Translate your tradecraft into the techniques, decision logic, and evaluation data that make our AI agents operate like expert operators at machine speed.\n\nBreak the machine. Pressure-test the swarm's attack paths, spot where it's naive or wrong, and make the human-in-the-loop calls that keep autonomous operations safe and accurate.\n\nBuild what's missing. Write scripts, tools, and plugins that extend Armadin's offensive capabilities, and treat AI as a daily force multiplier in your own workflow.\n\nTell the attack story. Deliver reports and debriefs that walk engineers, executives, and counsel through the attack narrative, the business risk, and the fix.\n\nStay ahead of the threat. Research emerging vulnerability classes, exploitation techniques, and AI-driven attacker tradecraft, and feed what you learn straight into the platform.\n\nOwn your work. Balance concurrent operations and internal research with startup-level autonomy, shifting priorities as fast as the threat does.\n\nWhat You'll Bring\nDeep, hands-on application offense. Web app and API exploitation beyond the OWASP Top 10, including business logic abuse, authentication and authorization bypass, and injection chains.\n\nDepth in at least one more attack surface:\nMobile (iOS and/or Android): reversing APKs and IPAs, runtime hooking, insecure storage, and traffic interception.\n\nThick/thin clients: desktop apps, client-server protocols, and memory analysis.\n\nSource code review: control-flow issues, injection paths, and insecure design patterns.\n\nReverse engineering: applications, obfuscators, and custom encryption schemes.\n\nAn attacker's toolkit and the instinct to go beyond it. Fluency with tools like Burp Suite, Caido, ZAP, Frida, jadx, Ghidra, and IDA Pro, plus the judgment to know when the tool is wrong.\n\nSystems understanding that makes chaining possible. Strong grasp of network protocols, client-server architecture, and the full range of application vulnerability classes, and how one leads to the next.\n\nComfort everywhere you land. Proficiency across Linux, Windows, and macOS, with scripting in Bash, Python, or similar.\n\nAn AI-forward way of working. You already use AI tools to speed up recon, analysis, or tooling, and you're excited to push them much further.\n\nSharp human-in-the-loop judgment. You absorb new information quickly, make time-sensitive calls under pressure, and can explain your reasoning to safety and engineering teams.\n\nA builder's, startup mindset. You're scrappy, self-directed, and comfortable with ambiguity, and you'd rather ship something useful than wait for a process.\n\nClear communication with clients. You can translate a complex attack chain for engineers, executives, and legal counsel during engagements and remediation debriefs.\n\nLogistics. Must be eligible to work in the United States without sponsorship. Ability to travel up to 20% for on-site engagements or client meetings.\n\nEven Better\nYou've built offensive automation or worked alongside AI/ML. Agentic frameworks, ML-assisted fuzzing, or automated exploitation pipelines all count.\n\nYou've shipped offensive tooling. Burp or Caido extensions, open-source offensive projects, or custom frameworks others actually use.\n\nYou hunt in public. Bug bounty findings, CVEs, CTF wins, or conference talks with an application-security focus.\n\nYou keep sharpening. Active time on platforms like PortSwigger Web Security Academy, Hack The Box, or TryHackMe.\n\nRelevant certifications, such as OSWE, Burp Suite Certified Practitioner, GWAPT, CWES, eWPTX, eMAPT, or the TCM Practical Web and Mobile Pentest tracks.\n\nLocation\nRemote in United States\nBenefits & Perks | FTE\nFull Health, Dental, & Vision Coverage\nMeaningful Equity Ownership\nIn-Office Meals\nHaircuts at the Office\nCompany Sponsored Conferences & Events\n401(k), HSA, and FSA Plans\nFlexible PTO","description_format":"text","description_chars":7688,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Office meals"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Security Operations","Cybersecurity AI"],"lifecycle":[{"event":"open","at":"2026-10-14T22:33:12Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 12","filings_12m":12,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":207917,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":38,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/armadin-senior-red-team-operator-applications","json_url":"https://alion.io/job/armadin-senior-red-team-operator-applications.json","meta":{"generated_at":"2026-10-21T03:00:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4480,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1825289},"rest":"https://alion.io/mcp/rest/get_company?id=1825289"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Farmadin-senior-red-team-operator-applications"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Farmadin-senior-red-team-operator-applications"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Farmadin-senior-red-team-operator-applications"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/armadin-senior-red-team-operator-applications\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Farmadin-senior-red-team-operator-applications"}]}