Cybersecurity Engineer
- Role
- Security
- Experience
- Mid
Open to US only. Set where you work from to check your eligibility.
No BS summary
Cybersecurity engineer with 3–5 years in security/software engineering, strong Python, cloud, Linux/networking/web security, and hands-on offensive security experience. Must be U.S.-based and able to build secure cloud infrastructure and tooling for AI security evaluations.
Core skills
Required skills
Optional skills
About 10a Labs: 10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and leading global technology platforms. Our adversarial red teaming, model evaluations, and intelligence collection enable engineering, safety, and security teams to stay ahead of evolving threats and deploy AI systems safely. Cybersecurity Engineer About the Role We are seeking a Cybersecurity Engineer to build secure, reproducible infrastructure and tooling for AI security evaluations You'll work across cloud infrastructure, security automation, internal tooling, and controlled offensive security testing to help identify and measure emerging AI-enabled cyber risks. This role is ideal for engineers who enjoy solving difficult technical problems, building scalable security solutions, and working alongside cross-functional teams at the forefront of AI security. What You'll Do Build tools, automation, and infrastructure that support scalable adversarial testing of AI systems and applications. Build and maintain realistic, repeatable, security test environments using cloud infrastructure and automation tools such as Terraform. Collaborate with red teamers and engineers to reproduce, investigate, and remediate vulnerabilities uncovered during AI security assessments. Develop and automate attack simulations to validate security controls, identify potential failure modes, and improve the resilience of AI-powered systems. Conduct threat modeling and security design reviews for new systems and features. Collaborate closely with software engineers to integrate security throughout the development lifecycle. Required Qualifications 3–5 years of professional experience in Cybersecurity, Security Engineering, Software Engineering, or a related field. Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a closely related topic. Professional experience with Python. Experience using git/github in a collaborative environment. Experience building or securing cloud environments using Amazon Web Services (AWS) or Google Cloud Platform (GCP). Strong understanding of Linux systems, networking, and modern web technologies. Experience automating cloud infrastructure using an Infrastructure as Code tool (Terraform preferred). Familiarity with Docker, Kubernetes and various virtualization technology stacks Familiarity with large language models (LLMs), AI systems, or AI security concepts. Demonstrated hands-on experience conducting penetration tests, red team assessments, adversary emulation, or comparable offensive security work. Strong understanding of authentication, authorization, and common web security vulnerabilities. Excellent debugging and problem-solving skills. Strong written and verbal communication skills. Preferred Qualifications Experience translating offensive-security findings into repeatable attack simulations, evaluation tooling, detections, or security-control improvements. Experience with CI/CD security and DevSecOps practices. Knowledge of OWASP Top 10 and common cloud attack techniques. Experience with detection engineering or SIEM platforms. Experience building internal developer tools or security platforms. Security certifications such as GSEC, OSCP, or cloud security certifications. Contributions to open-source security projects or participation in Capture the Flag (CTF) competitions are a plus. Experience working in fast-paced, high-growth, or start-up environments. What We're Looking For Builder mentality with a passion for solving difficult engineering problems. Curiosity about emerging cyber threats and AI security. Ability to thrive in ambiguous, fast-moving environments. Strong ownership and bias toward action. Collaborative mindset and eagerness to work across technical and non-technical teams. Continuous learner who enjoys experimenting with new technologies. Compensation & Benefits Salary Range: $135K–$160K, depending on experience and location Bonus: Performance-based annual bonus Professional Development: Support for conferences, continuing education, or leadership training Work Environment: Fully remote, U.S.-based Health Benefits: Comprehensive health, dental, and vision coverage Time Off: Generous PTO and paid holiday schedule Retirement: 401(k) plan
What you'll do
- Build tools, automation, and infrastructure that support scalable adversarial testing of AI systems and applications.
- Build and maintain realistic, repeatable security test environments using cloud infrastructure and automation tools such as Terraform.
- Collaborate with red teamers and engineers to reproduce, investigate, and remediate vulnerabilities uncovered during AI security assessments.
- Develop and automate attack simulations to validate security controls, identify potential failure modes, and improve the resilience of AI-powered systems.
- Conduct threat modeling and security design reviews for new systems and features.
- Collaborate closely with software engineers to integrate security throughout the development lifecycle.
What they require
- 3–5 years of professional experience in Cybersecurity, Security Engineering, Software Engineering, or a related field.
- Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a closely related topic.
- Professional experience with Python.
- Experience using git/github in a collaborative environment.
- Experience building or securing cloud environments using Amazon Web Services (AWS) or Google Cloud Platform (GCP).
- Strong understanding of Linux systems, networking, and modern web technologies.
- Experience automating cloud infrastructure using an Infrastructure as Code tool; Terraform preferred.
- Familiarity with Docker, Kubernetes and various virtualization technology stacks.
- Familiarity with large language models (LLMs), AI systems, or AI security concepts.
- Demonstrated hands-on experience conducting penetration tests, red team assessments, adversary emulation, or comparable offensive security work.
- Strong understanding of authentication, authorization, and common web security vulnerabilities.
- Excellent debugging and problem-solving skills.
- Strong written and verbal communication skills.
- Preferred: Experience translating offensive-security findings into repeatable attack simulations, evaluation tooling, detections, or security-control improvements.
- Preferred: Experience with CI/CD security and DevSecOps practices.
- Preferred: Knowledge of OWASP Top 10 and common cloud attack techniques.
- Preferred: Experience with detection engineering or SIEM platforms.
- Preferred: Experience building internal developer tools or security platforms.
- Preferred: Security certifications such as GSEC, OSCP, or cloud security certifications.
- Preferred: Contributions to open-source security projects or participation in Capture the Flag (CTF) competitions.
- Preferred: Experience working in fast-paced, high-growth, or start-up environments.
- Builder mentality with a passion for solving difficult engineering problems.
- Curiosity about emerging cyber threats and AI security.
- Ability to thrive in ambiguous, fast-moving environments.
- Strong ownership and bias toward action.
- Collaborative mindset and eagerness to work across technical and non-technical teams.
- Continuous learner who enjoys experimenting with new technologies.
Benefits
- Performance-based annual bonus.
- Support for conferences, continuing education, or leadership training.
- Fully remote, U.S.-based work environment.
- Comprehensive health, dental, and vision coverage.
- Generous PTO and paid holiday schedule.
- 401(k) plan.
10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and leading global technology platforms. Its adversarial red teaming, model evaluations, and intelligence collection enable engineering, safety, and security teams to stay ahead of evolving threats and deploy AI systems safely.