Senior Offensive Security Engineer

Job Description: - Plan and run objective-based red team operations against cloud, corporate, and production environments.

• Run purple team exercises with Security Operations to test and improve detection and response.
• Conduct deep security testing of Unity products and services, including web applications, APIs, the engine, editor, client runtime, ads and monetization systems, and developer-facing platforms.
• Find and demonstrate attack paths across multi-cloud environments, Kubernetes and containers, CI/CD pipelines, identity, and secrets.
• Test LLM integrations, AI-native products, and agent workflows for prompt injection, data leakage, tool misuse, and excessive permissions.
• Write clear, prioritized findings with realistic impact; work with owning teams on remediation and retest fixes.
• Build and maintain tools, scripts, and automation that scale adversarial engineering and turn repeated findings into continuous checks.
• Develop risk-based testing plans, complete red team or adversary emulation operations, provide executive-ready readouts, and track remediation.
• Collaborate with Product Security, Infrastructure Security, Security Operations, and engineering teams.

Requirements: - 6+ years in offensive security (red teaming, penetration testing, purple teaming, or vulnerability research), including leading engagements end to end.

• Hands-on experience attacking cloud environments (GCP, AWS, or Azure), including identity, Kubernetes and containers, and CI/CD.
• Strong web application and API security testing skills, with the ability to find logic flaws, not just scanner results.
• Solid scripting or programming ability, for example Python, Go, or C/C++, to build tools and exploits.
• Experience running adversary emulation or red team operations against realistic objectives, and working with defenders in purple team exercises.
• Clear written and verbal communication; ability to explain technical risk to engineers and non-technical leaders.
• Ability to work as part of a team, share ideas, offer support, and celebrate wins together.
• English proficiency sufficient for professional verbal and written exchanges.
• Preferred: Experience testing LLM-based products, AI agents, or AI-assisted developer tools.
• Preferred: Reverse engineering, binary exploitation, or game client and anti-cheat security experience.
• Preferred: Experience in gaming, ad tech, or large developer-facing platforms.
• Preferred: Bug bounty, CVEs, conference talks, published research, or open-source security tooling.
• Relevant certifications such as OSCP, OSEP, OSWE, or CRTO are useful but will not substitute for a track record.

Benefits: - Comprehensive health, life, and disability insurance

• Commute subsidy
• Employee stock ownership
• Competitive retirement/pension plans
• Generous vacation and personal days
• Support for new parents through leave and family-care programs
• Office food snacks
• Mental Health and Wellbeing programs and support
• Employee Resource Groups
• Global Employee Assistance Program
• Training and development programs
• Volunteering and donation matching program
• Equity awards
• Participation in company incentive plans, such as annual discretionary bonuses or sales commissions