Role Scope- Build Fluidstack's offensive security program from the ground up, including its methodology, tooling, and engagement cadence.
- Run red and purple team operations emulating advanced threat actors across our cloud infrastructure, endpoints and bare metal deployments.
- Pen test critical systems, including tenant isolation, bare metal GPU hosts, firmware and BMCs, and data center OT.
- Partner with security and engineering teams on AI-specific attack scenarios, including agentic systems and other novel AI-enabled risks.
- Contribute to AI-assisted offensive testing tools and workflows.
- Present findings to technical and executive audiences as clear, actionable risk that shapes the security roadmap.
- Live on the bleeding edge of AI-enabled offensive operations inside and outside our environments
What We're Looking ForThe below is a starting point. We always make space for exceptional people, so if you don't fit this role exactly, tell us where you would.- You have years of hands-on experience in red teaming and offensive security operations.
- You have deep expertise in at least two of: macOS, Linux, cloud (AWS, GCP, Azure), Kubernetes, CI/CD pipelines.
- You've found novel attack paths and chained vulnerabilities into full compromise.
- You've run adversary simulations against well-defended environments.
- You write quality code in Python, Go, or similar languages.
- You write findings that get fixed and help teams prioritize risk.
- You've worked closely with blue teams.
- Bonus: State-nexus threat models (frontier AI, government, critical infrastructure). Testing AI and ML systems (agentic workflows, model serving). Defensive experience (detection engineering, SIEM, EDR). Hardware and data center attacks (firmware, BMC, OT/ICS). Interest in AI safety and security.
We are committed to pay equity and transparency.
