Security Engineer - Red Team Job at Workato (Barcelona)

Red Team Engineer

As we continue to scale and grow, we are looking for an experienced Red Team Eng...

Location

United Kingdom , London

Salary:

Not provided

iProov

Expiration Date

Until further notice

Requirements

5+ years of experience in ethical hacking, vulnerability research, exploit development, penetration testing or being a member of a red team, with significant focus on web application security
Strong hands-on experience attacking and defending modern web tech stacks
Experience with JavaScript/Typescript
Proficient with offensive web toolsets (Burp Suite, OWASP ZAP) and experienced building extensions/scripts
Experience with developing and maintaining web-focused tooling and automation (Burp extensions, custom scanners, authenticated API fuzzers, GraphQL mutation explorers, Puppeteer/Playwright scripts)
Experience with source code reviewing for control flow and security flaws
A passion for constructively break things
Want to be part of an ambitious, high-growth startup company
Written and verbal communication skills in English

Job Responsibility

Design and execute Red Team Operations against iProov’s biometric platform, web apps, APIs, identity flows
Strengthen the company’s security posture through offensive security assessments including the identification and exploitation of vulnerabilities across the web platform
Perform penetration testing and realistic security exercises to simulate various attack scenarios, to test and improve our detection and response capabilities, and to identify weaknesses in our infrastructure and products
Execute technical security assessments to identify risk, likelihood and impact an attacker may have on the System due to weak or missing controls
Conduct research into real-world threat actor tactics, techniques, and procedures (TTP’s) to develop proof-of-concept tools and replicate real world attacks
Present findings and operational work to groups in a clear and professional manner
Produce clear, actionable reports, risk-ranked remediation plans, and executive summaries aimed at product and engineering stakeholders
Collaborate with defenders, product teams, and leadership to translate findings into prioritized, actionable remediation and risk reduction
Bring insight into all aspects of modern security issues to our products and rapidly developing prototypes for mitigations
Mentor engineers in secure-by-design patterns, client-side security, and secure API design

What we offer

25 days Annual Leave, plus 8 Bank Holidays (more holiday with service - up to an extra 5 days off per year based on your continuous service)
Growth Shares allocated after passing probation (6 months of service)
Salary sacrifice schemes including: Pension, Cycle To Work and Electric Car Scheme
Nursery Sacrifice Scheme
Work Overseas Perk - Work globally for up to 2 weeks
Life Assurance
SmartHealth - Access to private GP, Psychologist, Nutritionist along with tailored fitness plans for both you and your family
Award winning L&D platform with personal allocated training budgets
Benefit from personalized 1:1 career coaching with our in-house Occupational Psychologist
Enhanced paid family leave

Fulltime

Security and Application Security Engineer

Beacon Technologies is seeking a Security and Application Security Engineer. The...

Location

United States , Las Vegas

Salary:

Not provided

Beacon Technologies

Expiration Date

Until further notice

Requirements

Minimum of five years of Information Security experience with at least two years of application-level security
Strong communication skills: ability to convey and document security guidelines, requirements, and coding best practices
Familiarity with Security Best Practices in common coding languages
Application Penetration Testing / API Security Testing
Software Development Life Cycle Design and Implementation
Static and Dynamic Application Testing Tools and Methods
Container and orchestration security (Kubernetes, Docker, Octopus, GitHub, etc.)
Familiarity with Application Security Testing Frameworks such as OWASP
Strong logical and analytical thinker
exceptional skills in security systems solutions

Job Responsibility

Operate as a liaison between the Security Team and the Development Teams
Preserve PCI and SOX Security Certification programs with a primary focus on ensuring compliance with the appropriate industry standards and security controls
Supporting incident response and architecture review whenever applications security expertise is needed
Integrating threat modeling practices into the SDLC
Work with other staff to perform periodic scans and evaluation of system security including areas such as patch management, penetration testing, vulnerability assessments, and other types of InfoSec-related tasks
Assist in identifying and communicating security exposures, information security incidents or non-compliance situations to IT management or the CISO as appropriate. Duties may also include collecting and documenting cyber security and incident response event data as necessary.

What we offer

Career advancement opportunities
extensive training
excellent benefits including paying for health and dental premiums for salaried employees.

Fulltime

Security Engineering Manager

Corporate Tools is looking for a Security Engineering Manager who eats vulnerabi...

Location

Salary:

185000.00 USD / Year

Corporate Tools

Expiration Date

Until further notice

Requirements

BS in Computer Science or equivalent experience
5+ years building and securing software — hands‑on experience with web frameworks (Rails, Django, Node, etc.) and modern architectures
Proven application security expertise: secure SDLC, OWASP, threat modeling, exploit mitigation, and vulnerability remediation
Experience leading security or engineering teams — setting strategy, running scrums, conducting reviews, and mentoring talent
Strong knowledge of cloud environments (AWS, Azure, GCP) and securing databases (SQL/NoSQL) in production
Exposure to offensive and defensive security practices — red team, blue team, or incident response experience a plus
Ability to communicate risk and solutions to execs, engineers, and auditors — respected by hackers and trusted by leadership
Pragmatic mindset: knows when to enable speed, when to block, and how to automate guardrails to keep teams fast and safe

Job Responsibility

Lead 6 security engineers across three specialized teams: Red (offense), Blue (defense), and Orange (compliance)
Own the security strategy and execution for offensive testing, defensive monitoring, and compliance work — ensuring all three disciplines are aligned
Act as the technical anchor for the teams: review code, guide exploits, drive secure architecture decisions, and mentor engineers
Partner with product and engineering leads to embed security into development (threat modeling, secure coding, CI/CD guardrails)
Build internal security tools and automation that make it easier for product teams to ship securely
Oversee red team engagements and turn findings into actionable fixes, not just reports
Manage defensive capabilities — incident response, detection engineering, monitoring — and continually improve them
Ensure compliance frameworks (SOC2, ISO, PCI, etc.) are met without slowing innovation or creating unnecessary bureaucracy
Set a high technical bar: coach, mentor, and challenge engineers to pursue elegant, practical security solutions
Balance being a builder and a leader: stay hands‑on enough to earn respect from hackers, but prioritize leading and scaling the team’s impact

What we offer

100% employer-paid medical, dental and vision for employees
Annual review with raise option
22 days Paid Time Off accrued annually, and 4 holidays
After 3 years, PTO increases to 29 days. Employees transition to flexible time off after 5 years with the company—not accrued, not capped, take time off when you want
The 4 holidays are: New Year’s Day, Fourth of July, Thanksgiving, and Christmas Day
Paid Parental Leave
Up to 6% company matching 401(k) with no vesting period
Quarterly allowance
Use to make your remote work set up more comfortable, for continuing education classes, a plant for your desk, coffee for your coworker, a massage for yourself... really, whatever
Open concept office with friendly coworkers

Red Team Operations Manager

To lead, oversee, and quality assure the execution of Red Team engagements end-t...

Location

United Kingdom

Salary:

Not provided

Bugcrowd

Expiration Date

Until further notice

Requirements

Extensive experience leading and/or managing Red Team engagements in enterprise environments, preferably across multiple industries (e.g. finance, critical infrastructure, cloud / SaaS / OT)
Deep technical knowledge of exploitation, post-exploitation, lateral movement, persistence, command & control, evasion, privilege escalation
Good knowledge and experience with Blue Team controls e.g. IDS/IPS, SIEM, EDR, NGFW, log analysis, detection engineering, ideally experience in bypassing or evading them safely
Solid experience with modern cloud environments (Azure, AWS, GCP), hybrid / on-premise networks, potentially OT/IoT/industrial environments
Strong tradecraft / OpSec awareness around how to avoid detection and conduct operations with minimal operational risk
Familiarity with CREST / STAR / TIBER etc. and regulatory / compliance requirements in relevant geographies
Proven experience in threat intelligence ingestion, scenario design, mapping to relevant threat actors
Excellent written and verbal communication skills and able to produce high quality reports, executive summaries, interact with senior leadership, legal, compliance etc.
Good project / operations management skills with an eye for budgeting, scheduling, resource allocation, interfacing external/internal teams
Ability to make real-time decisions under pressure, to balance risk vs reward

Job Responsibility

Lead, oversee, and quality assure the execution of Red Team engagements end-to-end from scoping & planning, through execution, reporting, to debrief and capability development
Ensure that all operations are safe, legal, technically robust, aligned with threat intelligence, compliance frameworks, and deliver high value to customers
Act as a subject-matter expert and manager for both operations and sales / client-facing aspects of Red Team services
Lead multiple concurrent Red Team engagements across industries
Define, negotiate and document scope, objectives, rules of engagement, deliverables, constraints, escalation & approval pathways
Oversee milestone planning e.g. kick-offs, stand-ups, wash-ups, strategic debriefs
Manage resources e.g. operator assignments, tooling, support functions
Track engagement progress vs objectives, adjust as needed
Assess and manage technical risk ensuring that any red team activity minimises risk to customer operations, data, systems
Real-time decision making during operations around TTP deployment, bypass of defenses, managing detections or unexpected discovery

Red Team Operations Manager

To lead, oversee, and quality assure the execution of Red Team engagements end-t...

Location

Australia

Salary:

Not provided

Bugcrowd

Expiration Date

Until further notice

Requirements

Extensive experience leading and/or managing Red Team engagements in enterprise environments, preferably across multiple industries (e.g. finance, critical infrastructure, cloud / SaaS / OT)
Deep technical knowledge of exploitation, post-exploitation, lateral movement, persistence, command & control, evasion, privilege escalation
Good knowledge and experience with Blue Team controls e.g. IDS/IPS, SIEM, EDR, NGFW, log analysis, detection engineering, ideally experience in bypassing or evading them safely
Solid experience with modern cloud environments (Azure, AWS, GCP), hybrid / on-premise networks, potentially OT/IoT/industrial environments
Strong tradecraft / OpSec awareness around how to avoid detection and conduct operations with minimal operational risk
Familiarity with CREST / STAR / TIBER etc. and regulatory / compliance requirements in relevant geographies
Proven experience in threat intelligence ingestion, scenario design, mapping to relevant threat actors
Excellent written and verbal communication skills and able to produce high quality reports, executive summaries, interact with senior leadership, legal, compliance etc.
Good project / operations management skills with an eye for budgeting, scheduling, resource allocation, interfacing external/internal teams
Ability to make real-time decisions under pressure, to balance risk vs reward

Job Responsibility

Lead multiple concurrent Red Team engagements across industries
Define, negotiate and document scope, objectives, rules of engagement, deliverables, constraints, escalation & approval pathways
Oversee milestone planning e.g. kick-offs, stand-ups, wash-ups, strategic debriefs
Manage resources e.g. operator assignments, tooling, support functions
Track engagement progress vs objectives, adjust as needed
Assess and manage technical risk ensuring that any red team activity minimises risk to customer operations, data, systems
Real-time decision making during operations around TTP deployment, bypass of defenses, managing detections or unexpected discovery
Review and approve attack plans, threat modelling, intelligence
Ensure operators employ strong operational security (OpSec), safe tradecraft, evidence collection, clean up post-engagement
Maintain up-to-date knowledge of Red Team tools, adversary TTPs, defensive controls, detection systems

Security Engineering Lead

Citi's Application, Platform and Engineering team is looking for a Security Engi...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Bring your deep-dive application security engineering expertise from building production systems
thrive in a results-driven environment, where flexibility fuels impact
be a game-changer, ready to step beyond your designated role
love the synergy of pair programming
seize the opportunity to secure AI applications at scale
have a relentless passion to learn more about AI security, LLM attacks, and bringing your knowledge to shape Citi's secure AI future
proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
hands-on experience finding and exploiting vulnerabilities, conducting red team exercises, and thinking like an attacker to strengthen defenses
experience building security tools and secure production systems with Go, Python, JavaScript
deep experience with HashiCorp Vault for enterprise-scale secrets management

Job Responsibility

Build secure AI products
conduct penetration testing and vulnerability research
design automated security solutions
identify and mitigate AI-specific vulnerabilities
lead security practices in development lifecycles
mentor engineers on secure coding practices.

What we offer

27 days annual leave plus bank holidays
discretional annual performance-related bonus
private medical care and life insurance
employee assistance program
pension plan
paid parental leave
special discounts for employees, family, and friends

Fulltime

Senior AI Security Engineer

Senior AI Security Engineer role in Citi's Application, Platform and Engineering...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Production system builder with security focus - proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
Ethical hacking and penetration testing expertise - hands-on experience finding and exploiting vulnerabilities, conducting red team exercises
State-of-the-art security engineering with Go, Python, JavaScript
HashiCorp Vault mastery - deep experience writing custom plugins, creating secrets engines, implementing dynamic credentials
Enterprise authentication & authorization - designing and implementing OAuth, JWT, RBAC, and complex identity systems
API security and threat modelling - securing REST/GraphQL APIs, conducting threat assessments
AI/ML security and vulnerability research - understanding of LLM vulnerabilities, model security, prompt injection attacks
Security automation and tooling – automating manual security processes
Cloud-native security - securing containerized applications in Kubernetes, service mesh security
Incident response and forensics - experience investigating, analyzing, and responding to security incidents

Job Responsibility

Build secure AI products from 0-1 - Engineer production-grade, business-facing AI platforms with security built-in from day one
Conduct ethical hacking and red team activities - penetration testing, vulnerability research, and attack simulation
Design and build security tools and frameworks - Create automated security solutions that scale across fast-paced development cycles
Secure novel AI attack surfaces - Identify and mitigate LLM-specific vulnerabilities, prompt injection attacks, and AI model security risks
Lead 'shift left' security - Embed security practices throughout rapid development lifecycle while maintaining velocity
Mentor security practices - Guide other engineers on secure coding, vulnerability remediation, and security-first thinking

What we offer

27 days annual leave (plus bank holidays)
Discretional annual performance related bonus
Private Medical Care & Life Insurance
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Hybrid working model (up to 2 days working at home per week)
Competitive base salary (annually reviewed)

Fulltime

Senior Product Security Engineer

Join our Product Security team, where you'll partner with development and game t...

Location

United States , Las Vegas

Salary:

Not provided

Take-Two Interactive Software, Inc.

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Technology, or a similar field, or equivalent experience
At least 5 years of demonstrated experience in application security, ideally within the gaming or technology sectors
Validated expertise in pentesting, security architecture, risk management, and securing CI/CD pipelines
Extensive knowledge of common and complex security vulnerabilities, along with effective mitigation techniques
Ability to translate design documents into security-focused guidelines and requirements for product development
Adapt quickly to new technologies, languages, and solve challenges outside your expertise

Job Responsibility

Develop threat models for a variety of applications and games to prioritize scope and use cases for security testing
Execute hands-on penetration tests and red team exercises to identify vulnerabilities in applications, infrastructure, and services
Conduct manual and automated secure code reviews in languages such as C#, Java, Python, and JavaScript, providing clear, actionable guidance to developers on vulnerability remediation
Triage, validate, and manage vulnerability reports from our bug bounty program, working with external researchers and internal teams on resolution
Develop and implement security automation tools to improve the efficiency and effectiveness of security processes
Provide security architecture and design guidance to development teams, ensuring secure coding practices are followed
Partner with teams to define and execute security strategy, driving security priorities across the organization
Stay ahead of emerging security threats, seeking and advocating for new technologies to address complex risks

What we offer

Medical (HSA & FSA)
dental
vision
401(k) with company match
employee stock purchase plan
commuter benefits
in-house wellness program
broad learning & development opportunities
a charitable giving platform with company match
Fitness allowance

Fulltime

Security Engineer - Red Team

Workato

Location:
Spain , Barcelona

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
February 18, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Security Engineer - Red Team

Red Team Engineer

Security and Application Security Engineer

Security Engineering Manager

Red Team Operations Manager

Red Team Operations Manager

Security Engineering Lead

Senior AI Security Engineer

Senior Product Security Engineer

Security Engineer - Red Team

Workato

Location:Spain , Barcelona

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:February 18, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Security Engineer - Red Team

Red Team Engineer

Security and Application Security Engineer

Security Engineering Manager

Red Team Operations Manager

Red Team Operations Manager

Security Engineering Lead

Senior AI Security Engineer

Senior Product Security Engineer

Location:
Spain , Barcelona

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
February 18, 2026