4+ years in offensive security, adversarial ML, AI red teaming, or ML engineering with an adversarial focus.
Hands-on experience with synthetic media generation in an offensive or research context.
Strong Python skills and practical ML fluency (e.g., PyTorch) for building attack tools and automating testing.
Knowledge of adversarial ML techniques and model robustness measurement.
Ability to communicate technical findings clearly to both technical and non-technical audiences.
Background in media forensics, signal processing, or computer vision (nice to have).
Experience in traditional red teaming or penetration testing, relevant certifications, or familiarity with AI security tools (nice to have).
Published research or contributions in adversarial ML or AI security (nice to have).
Responsibilities
Conduct continuous adversarial testing on detection models across various media types.
Create realistic attack simulations that reflect real-world bad actor tactics.
Develop and maintain red team infrastructure, including test harnesses and attack catalogs.
Prioritize findings and collaborate with AI scientists to ensure effective remediation.
Monitor the generative AI landscape to identify emerging threats.
Collaborate with Product teams to influence roadmap priorities based on red team insights.
Support Sales and Marketing with research and threat briefings for clients.
Contribute to adversarial testing of APIs and integrations in partnership with Security.
Benefits
100% premium coverage for employee healthcare plans, with partial coverage for dependents.
100% premium coverage for dental and vision plans for employees and dependents.
100% premium coverage for short/long-term disability and life insurance.
FSA/HSA and 401k programs available.
Equity compensation offered.
20 days of PTO annually.
12 weeks of parental leave.
Learning and development budget provided.
Monthly wellness benefits included.
Annual company-sponsored offsite events.
Daily in-office lunch for NYC HQ employees through UberEats.
Commuter benefits for NYC HQ employees.
Remote Fridays for NYC HQ employees.
Happy hours and local events for NYC HQ employees.
Full Job Description
The Red Team Role
Reality Defender's AI Red Team exists to break our own detection models before adversaries do. As a Red Team Engineer, you'll get your hands on the newest deepfake tools the moment they appear - voice clones, real-time face swaps, injection attacks, multimodal impersonations - use them the way real attackers would, and turn every failure you uncover into a measurable fix shipped alongside our AI and Data teams. This is a full-time role based at our NYC headquarters or remote within the U.S., reporting to VP of Product. Responsibilities include:
Run continuous adversarial testing against our detection models across audio, video, image, and text, reproducing new generative tools and techniques as they're released and stress-testing them against production models.
Build realistic, end-to-end attack simulations that mirror how bad actors actually operate - cloned voices in call centers, real-time synthetic video in onboarding flows and job interviews, virtual camera and media injection, and coordinated cross-channel impersonation.
Build and maintain repeatable red team infrastructure: test harnesses, attack catalogs, and an evolving adversarial dataset that every model release is validated against.
Close the loop on findings - prioritize them, hand them to AI scientists and engineers with clean reproduction steps, and verify fixes through regression testing so they stick.
Track the generative AI landscape (open-source models, commercial tools, research papers, and threat actor tradecraft) and triage which techniques are most likely to be weaponized next.
Partner with Product to shape roadmap priorities based on what red team findings reveal.
Support Sales, Marketing, and Solutions Engineering with credible, publishable research and threat briefings for enterprise and government customers.
Contribute to adversarial testing of the broader platform - APIs and integrations - in partnership with Security.
Help define the ethical guidelines and safe-handling practices for synthetic media used in testing.
Who you are.
4+ years of experience in offensive security, adversarial ML, AI red teaming, or ML engineering with a strong adversarial focus.
Hands-on experience generating synthetic media - voice cloning and TTS, face swap, lip-sync, diffusion-based image and video tools - in an offensive or research context, not just reading about it.
Strong Python skills and practical ML fluency (PyTorch or similar): you can build attack tooling, automate testing pipelines, and reason about why a model fails, not just that it did.
Working knowledge of adversarial ML techniques - evasion, adversarial perturbations, compression and post-processing attacks, data poisoning - and how to measure model robustness.
Clear communicator who can turn technical findings into prioritized, actionable guidance for engineers and non-technical audiences alike, and who thrives with ambiguity and minimal supervision.
Background in media forensics, signal processing, speech/audio, or computer vision. (nice to have)
Traditional red team or penetration testing experience (cloud, APIs, web), relevant certifications (e.g., OSCP), or familiarity with AI security tooling such as Garak, PyRIT, or the Adversarial Robustness Toolbox. (nice to have)
Published research, conference talks, CVEs, or open-source contributions in adversarial ML, deepfakes, or AI security. (nice to have)
Within 1 month, you'll...
Get up to speed on our detection model architecture across modalities, the current red team program, test harnesses, and adversarial dataset.
Meet your AI, Data, Product, and Security counterparts to understand how findings are triaged and remediated today.
Reproduce a set of recently released generative tools and techniques and run them against our production models.
Deliver your first written findings report with prioritized detection gaps.
Within 3 months, you'll...
Own a defined attack area end-to-end (e.g., real-time voice attacks or media injection).
Have expanded the attack catalog and test harness with new techniques and automation that reduces manual testing time.
Have driven at least one finding through remediation and verified the fix through regression testing.
Have established a regular cadence for sharing threat landscape updates with the AI and Product teams.
Within 6 months, you'll...
Have made red team testing a standard step in the model release process for your attack area.
Have built multimodal, real-time attack simulations (combined voice and video, conversational attacks) that reflect real operating conditions.
Be showing measurable improvement in model robustness against the adversarial dataset, tracked release over release.
Have contributed research to at least one external publication, customer briefing, or sales enablement asset.
Within 12 months, you'll...
Be recognized internally as a go-to authority on how deepfakes are made and how they evade detection.
Have built adversarial testing infrastructure that scales across every modality with minimal manual effort.
Have red team insights directly shaping the product roadmap and how we talk about risk with customers and government partners.
Be identifying and leading testing on the next generation of threats - such as AI agent callers and real-time multimodal impersonation - before they show up in production.
What we offer.
Reality Defender offers the following benefits to all our employees, regardless of location:
Healthcare plans with 100% premium coverage for employees and partial coverage available for dependents
Dental and Vision plans with 100% premium coverage for employees and their dependents
Short/Long-term disability and life insurance plans with 100% premium coverage for employees
FSA/HSA and 401k programs
Equity compensation
20 days of PTO per year
12 weeks of Parental Leave
Learning and Development budget
Monthly wellness benefits
Annual company-sponsored offsite
For employees working from Reality Defender's HQ in NYC, we offer the following benefits:
Daily in-office lunch through UberEats
Commuter benefits
Remote Fridays
Happy Hours and other local events
Base salary range: $155,000 - 185,000 based on experience and location. Includes equity.
