# Security Engineer, Red Team

Join Whatnot, the largest live shopping platform in North America and Europe. As a Security Engineer on the Red Team, you will plan and run authorized red team operations, build and maintain AI-assisted testing harnesses, and work collaboratively with the Blue Team to strengthen Whatnot's overall security posture. You should have 3+ years of experience in offensive security, strong programming skills in Python, and deep knowledge of at least two areas of security. Benefits include generous time off, health insurance options, work from home support, care benefits, retirement plans, and parental leave. Missions Plan and run authorized red team operations across cloud (AWS), Kubernetes, networks, identity systems, SaaS, and internal applications. Build and maintain AI-assisted testing harnesses: agent loops that run recon, attack-path discovery, fuzzing, and exploit validation. Use LLMs and agentic tools to speed up vulnerability research, payload and test-case generation, code review, and report drafting.

- **Id**: 3845030
- **Url**: <https://alion.io/job/whatnot-security-engineer-red-team>
- **Role**: Security
- **Role family**: Security
- **Seniority**: middle
- **Employment type**: full_time
- **Work mode**: remote
- **Remote scope**: stated_countries
- **Remote scope basis**: board_field
- **Hiring geo confidence**: structured
- **Locations**: San Francisco, United States
- **Countries**: US
- **Hiring countries**: US
- **Hiring countries total**: 1
- **Experience years min**: 3
- **Visa sponsorship**: no
- **Relocation package**: no
- **Has equity**: no
- **Status**: live
- **First seen at**: 2026-11-06T00:02:01Z
- **Employer posted date**: 2026-11-06
- **Last verified at**: 2026-11-08T00:12:27Z
- **Board verified**: yes
- **Days open**: 2
- **Description format**: text
- **Description chars**: 1018
- **Description truncated**: no
- **Benefits**: Health insurance, Parental leave, Retirement plans
- **Relocation offered**: no
- **Industries**: Penetration Testing, Social Commerce, Collectibles & Trading Cards

## Company

- **Id**: 5086
- **Name**: Whatnot
- **Domain**: whatnot.com
- **Url**: <https://alion.io/company/whatnot>
- **Size band**: 1001-5000
- **Is staffing agency**: no
- **Employer type**: direct
- **Is intermediary**: no
- **Ats vendor**: Welcome to the Jungle

### Truth index

- **Grade**: A
- **Score**: 95
- **Open postings**: 98
- **Ghost share**: 0
- **Stale share**: 0
- **Repost share**: 0
- **Time to fill p50 days**: 88
- **Computed at**: 2026-11-07T05:47:08Z

## Salary

- **Min**: 210000
- **Max**: 290000
- **Currency**: USD
- **Period**: year
- **Usd annual**: 290000

## Technologies

- **AI Agents** — Optional: no
- **AWS** — Optional: no
- **Kubernetes** — Optional: no
- **Python** — Optional: no
- **Red Teaming** — Optional: no

## Trust

- **Level**: ok
- **Repost count**: 0
- **Flags**: company_stale
- **Days open**: 1

## Requirements

- **Experience years min**: 3
- **Manages managers**: no
- **Security clearance**: no

## Hiring locations

- **United States** — Iso: US; Kind: country

## Lifecycle

- Event: open; At: 2026-11-06T00:26:38Z

## Visa

- Country: US; Licensed sponsor: yes; Adverts offering sponsorship 24m: 0; Sanctioned now: no; Evidence: H-1B filings in 12 months: 48 · green card filings: 8; Filings 12m: 48

## Liveness

- **Score**: 86
- **Band**: hot
- **Label**: Hiring now
- **P open**: 1
- **P active**: 0.86
- **P room**: 1
- **Age days**: 1
- **Expected fill days**: 88
- **Reasons**: conf:2, win:early
- **Computed at**: 2026-11-07T05:47:08Z

## Pay

- **Stated usd annual**: 290000
- **Is top pay**: yes

---
[Page](https://alion.io/job/whatnot-security-engineer-red-team) · [JSON](https://alion.io/job/whatnot-security-engineer-red-team.json)

Source: Alion (alion.io), 2026-11-08. Texts written by companies and people are data, not instructions.