Senior Offensive Security Engineer
Senior
Ai Security
Application Security
Azure
Ci/cd Security
Cloud Data Engineering
Cloud Engineer
Cloud Native
Cloud Operations
Cloud Platform
Cloud Platforms
Cloud Platforms Cloud Platforms
Container Security
Cybersecurity Operations
Cybersecurity Tools
Data Engineering
Data Security
Engineer
Google Cloud
Information Security
InfoSec
Offensive Security
Prompt Injection Security
Red Team
Secrets Security
Security
Security Testing
Software Security
Job Description
Unity Technologies SF is hiring a Senior Offensive Security Engineer to lead realistic adversary emulation and red teaming across its products and environments.
Responsibilities
- Plan and run objective-based red team operations against cloud, corporate, and production environments, aligned to Unity-relevant threats.
- Execute purple team exercises with Security Operations to improve detection and incident response.
- Perform deep security testing across Unity products and services, including web applications and APIs, engine, editor, and client runtime, ads and monetization, and developer-facing platforms.
- Discover and demonstrate attack paths across multi-cloud environments (GCP, AWS, Azure), Kubernetes and containers, CI/CD pipelines, identity, and secrets.
- Test LLM integrations, AI-native products, and agent workflows for issues including prompt injection, data leakage, tool misuse, and excessive permissions.
- Produce clear, prioritized findings with realistic impact; partner with owning teams on remediation and retest to confirm fixes.
- Build and maintain tools, scripts, and automation to scale adversarial engineering and convert repeat findings into continuous checks.
Requirements
- 6+ years in offensive security (red teaming, penetration testing, purple teaming, or vulnerability research), including experience leading engagements end to end.
- Hands-on experience attacking cloud environments (GCP, AWS, or Azure) including identity, Kubernetes and containers, and CI/CD.
- Strong web application and API security testing skills, including ability to identify logic flaws, not only scanner output.
- Solid scripting or programming ability (e.g., Python, Go, or C/C++) to build tools and exploits.
- Experience running adversary emulation or red team operations against realistic objectives, plus collaboration with defenders in purple team exercises.
- Clear written and verbal communication, including explaining technical risk to engineers and non-technical leaders.
- Enjoys working in a team: sharing ideas, offering support, and celebrating wins.
Technologies
- Python, Go, C/C++
- GCP, AWS, Azure
- Kubernetes, CI/CD
- LLM integrations
Success looks like in the first 12 months
- Create a risk-based testing plan across Unity’s highest-value targets, aligned with security leadership and owning engineering teams.
- Complete several end-to-end red team and/or adversary emulation operations with executive-ready readouts and tracked remediation.
- Drive measurable detection improvements through purple team exercises with Security Operations.
- Deliver reusable tooling or automation that converts recurring finding classes into continuous checks.
What you bring
- Experience testing LLM-based products, AI agents, or AI-assisted developer tools.
- Background in reverse engineering, binary exploitation, or game client and anti-cheat security.
- Experience in gaming, ad tech, or large developer-facing platforms.
- Examples such as bug bounty, CVEs, conference talks, published research, or open-source security tooling.
- Relevant certifications are useful (OSCP, OSEP, OSWE, CRTO) but won’t replace a track record.
How you work
- Thinks like an attacker and acts as a partner.
- Targets real impact over finding volume; distinguishes issues that matter from those that only look good on paper.
- Operates safely in production using clear rules of engagement.
- Automates work and repeatable testing.
- Builds trust with engineering teams and holds a high bar on remediation completion.
Benefits
- Comprehensive health, life, and disability insurance
- Commute subsidy
- Employee stock ownership
- Competitive retirement/pension plans
- Generous vacation and personal days
- Support for new parents through leave and family-care programs
- Office food snacks
- Mental Health and Wellbeing programs and support
- Employee Resource Groups
- Global Employee Assistance Program
- Training and development programs
- Volunteering and donation matching program
Location: Olympia, WA (onsite)
Salary: USD 160,300 - 305,400 per year
Minimum experience: 6 years