{"id":468550,"url":"https://alion.io/job/safebreach-red-team-developer","title":"Red Team Developer","company":{"id":180435,"name":"SafeBreach","domain":"safebreach.com","url":"https://alion.io/company/safebreach","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel","Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":65000,"max_usd":160000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-08-10T09:09:23Z","employer_posted_date":"2026-08-10","last_verified_at":"2026-10-26T23:05:39Z","board_verified":true,"closed_at":null,"days_open":77,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":77},"description":"Title: Red Team Developer\nLocations (Hybrid): Tel Aviv, Israel\nReporting To: Engineering Group Manager\nOpportunity Highlights\nWe are seeking a highly skilled and experienced Red Team Developer for our specialized attack team focused on developing offensive, production-ready attack capabilities. This is a research and development (R&D) role at the core of our offensive security efforts. You will be responsible for architecting and delivering advanced low-level attack components used in evasion techniques, red team tooling, and adversary simulations.\nThe Impact You Will Have\nLead the design, development, and deployment of production-grade offensive capabilities targeting application and OS CVEs exploits\nDevelop attack components for Windows/Linux including OS-level evasion mechanisms\nImplement Python bindings to connect native low-level components with Python-based research tools and automation\nResearch and develop bypass techniques for modern security controls\nCollaborate with the Research Team and other R&D stakeholders to implement and refine offensive concepts\nHarness AI coding agents to streamline the above processes\nWhat Sets You Apart\nTechnical Expertise\n3+ years of hands-on experience in development of offensive attack components\n3+ years of Python experience, especially for integrating with native modules and supporting research workflows\nExperience developing stealthy and evasive attack components, including in-memory execution and user/kernel-mode tooling\nFamiliarity with EDR evasion, API hooking, and direct system call manipulation\nPersonal Attributes\nPassionate about offensive security and deep technical research\nPassionate about AI coding agents\nSelf-motivated and capable of operating independently in high-trust environments\nCreative and methodical in problem solving, with a strong attention to detail\nEven BETTER if you have\nDeep knowledge of Windows/Linux APIs, security controls, and undocumented behaviors relevant to offensive security\nExperience with MITRE ATT&CK and implementing or simulating ATT&CK techniques\nBackground in red teaming, adversary emulation, or APT simulation\nPrior contributions to offensive tooling or internal R&D platforms\nUnderstanding of modern threat actor TTPs and practical application in research environments\nJoin us to lead the development of real-world offensive capabilities at the intersection of advanced OS knowledge and cutting-edge security research.\nWho We Are\nSafeBreach is on a mission to help organizations have certainty in their security. Long trusted as the global leader in adversarial exposure validation (AEV), SafeBreach empowers organizations to take command of risk by operationalizing the full CTEM lifecycle with the SafeBreach CTEM Platform. Powered by the SafeBreach Helm AI infrastructure layer and grounded in the award-winning SafeBreach Exposure Validation Platform, the SafeBreach CTEM Platform is the first enterprise-grade, closed-loop solution designed to move organizations beyond siloed security activities toward a continuous, intelligence-driven exposure management program. Backed by world-renowned threat researchers and an unrivaled customer success team, SafeBreach provides the capabilities enterprises need to holistically understand threat exposure, make data-driven decisions that reduce risk, and measurably improve cyber resilience-safely and at scale. We are a team of passionate security professionals and innovators. If you’re ready to tackle complex security challenges and make a tangible impact on enterprise defense, we’d love to meet you.\nWhat We Offer\nCompetitive salary and equity grants\nHybrid flexibility\nQuarterly recharge weekends\nLearning & development stipend\nGenerous paid leave policies including flexible PTO and parental leave\nHOW WE'LL GET TO KNOW EACH OTHER\nWe view interviewing as a two-way street. We want you to interview us just as much as we interview you! (Avg. timeline: 21-28 days)\nStep 1: The Intro (15 min) \nA casual meeting with the Talent team to break the ice.\nStep 2: The Technical Aspects (3-4 days. + 60 min meeting)\nComplete an assignment to understand real scenarios you will face in this role, then connect with our CTO to discuss it. \nStep 3: The Vision & The Big Picture (45-60 min meetings)\nMeet the team at the office. Connect your future manager to discuss the role, the challenges, and how you can make an impact. Also meet with our HR Team and VP of R&D to ensure our values and long-term goals align with yours.\nStep 4: The Offer\nIf the vibe is right, we make it official!\n DEI&B Commitment (Diversity, Equity, Inclusion & Belonging)\nAt SafeBreach, we celebrate the rich diversity of our team, where every employee's unique perspective is a valued thread in our collective success. We are unwavering in our commitment to fostering an inclusive workplace that nurtures a sense of belonging and empowers each individual to unleash their full potential. We are dedicated to creating opportunities for collaboration, innovation, and meaningful career growth, ensuring that every voice is not just heard, but cherished.","description_format":"text","description_chars":5089,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave"],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Cybersecurity","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-09-06T12:44:34Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.465,"p_room":0.28,"age_days":76,"expected_fill_days":30,"reasons":["conf:1","win:tail","crowd:"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/safebreach-red-team-developer","json_url":"https://alion.io/job/safebreach-red-team-developer.json","meta":{"generated_at":"2026-10-27T00:03:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":58,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":180435},"rest":"https://alion.io/mcp/rest/get_company?id=180435"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsafebreach-red-team-developer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsafebreach-red-team-developer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsafebreach-red-team-developer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/safebreach-red-team-developer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsafebreach-red-team-developer"}]}