Security Engineer, Red Team
Whatnot
- San Francisco, United States
- Mid Level
- 3+ years
- Posted
Skills
Required
- offensive security
- Python
Preferred
- cloud
- AWS
- Kubernetes
- identity systems
- agent loops
- payload and test-case generation
As a Security Engineer on the Red Team, you will plan and run authorized red team operations, build and maintain AI-assisted testing harnesses, and work collaboratively with the Blue Team to strengthen Whatnot's overall security posture.
About Whatnot
Whatnot, the largest live shopping platform in North America and Europe.
Responsibilities
- Plan and run authorized red team operations across cloud (AWS), Kubernetes, networks, identity systems, SaaS, and internal applications.
- Build and maintain AI-assisted testing harnesses: agent loops that run recon, attack-path discovery, fuzzing, and exploit validation.
- Use LLMs and agentic tools to speed up vulnerability research, payload and test-case generation, code review, and report drafting.
Requirements
- You should have 3+ years of experience in offensive security, strong programming skills in Python, and deep knowledge of at least two areas of security.
Pay
USD 210,000 - 290,000
Benefits
- Benefits include generous time off, health insurance options, work from home support, care benefits, retirement plans, and parental leave.