Build and automate secure, reproducible cloud infrastructure and tooling to support adversarial testing of AI systems. Collaborate with red teamers and engineers to reproduce, remediate, and simulate attacks, perform threat modeling and security reviews, and integrate security across the development lifecycle.
About 10a Labs: 10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and leading global technology platforms. Our adversarial red teaming, model evaluations, and intelligence collection enable engineering, safety, and security teams to stay ahead of evolving threats and deploy AI systems safely.
We are seeking a Cybersecurity Engineer to build secure, reproducible infrastructure and tooling for AI security evaluations You'll work across cloud infrastructure, security automation, internal tooling, and controlled offensive security testing to help identify and measure emerging AI-enabled cyber risks.
This role is ideal for engineers who enjoy solving difficult technical problems, building scalable security solutions, and working alongside cross-functional teams at the forefront of AI security.
What You'll Do- Build tools, automation, and infrastructure that support scalable adversarial testing of AI systems and applications.
- Build and maintain realistic, repeatable, security test environments using cloud infrastructure and automation tools such as Terraform.
- Collaborate with red teamers and engineers to reproduce, investigate, and remediate vulnerabilities uncovered during AI security assessments.
- Develop and automate attack simulations to validate security controls, identify potential failure modes, and improve the resilience of AI-powered systems.
- Conduct threat modeling and security design reviews for new systems and features.
- Collaborate closely with software engineers to integrate security throughout the development lifecycle.
- 3–5 years of professional experience in Cybersecurity, Security Engineering, Software Engineering, or a related field.
- Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a closely related topic.
- Professional experience with Python.
- Experience using git/github in a collaborative environment.
- Experience building or securing cloud environments using Amazon Web Services (AWS) or Google Cloud Platform (GCP).
- Strong understanding of Linux systems, networking, and modern web technologies.
- Experience automating cloud infrastructure using an Infrastructure as Code tool (Terraform preferred).
- Familiarity with Docker, Kubernetes and various virtualization technology stacks
- Familiarity with large language models (LLMs), AI systems, or AI security concepts.
- Demonstrated hands-on experience conducting penetration tests, red team assessments, adversary emulation, or comparable offensive security work.
- Strong understanding of authentication, authorization, and common web security vulnerabilities.
- Excellent debugging and problem-solving skills.
- Strong written and verbal communication skills.
- Experience translating offensive-security findings into repeatable attack simulations, evaluation tooling, detections, or security-control improvements.
- Experience with CI/CD security and DevSecOps practices.
- Knowledge of OWASP Top 10 and common cloud attack techniques.
- Experience with detection engineering or SIEM platforms.
- Experience building internal developer tools or security platforms.
- Security certifications such as GSEC, OSCP, or cloud security certifications.
- Contributions to open-source security projects or participation in Capture the Flag (CTF) competitions are a plus.
- Experience working in fast-paced, high-growth, or start-up environments.
- Builder mentality with a passion for solving difficult engineering problems.
- Curiosity about emerging cyber threats and AI security.
- Ability to thrive in ambiguous, fast-moving environments.
- Strong ownership and bias toward action.
- Collaborative mindset and eagerness to work across technical and non-technical teams.
- Continuous learner who enjoys experimenting with new technologies.
- Salary Range: $135K–$160K, depending on experience and location
- Bonus: Performance-based annual bonus
- Professional Development: Support for conferences, continuing education, or leadership training
- Work Environment: Fully remote, U.S.-based
- Health Benefits: Comprehensive health, dental, and vision coverage
- Time Off: Generous PTO and paid holiday schedule
- Retirement: 401(k) plan
Similar Jobs
Automotive • Big Data • Information Technology • Robotics • Software • Transportation • Manufacturing
Design, build, and operate security-focused software, services, automation frameworks, APIs, and developer platforms. Integrate security controls into CI/CD and cloud-native workflows, implement identity and access-management capabilities, conduct secure code reviews and threat modeling, and maintain security telemetry systems. Collaborate with engineering, security, and compliance teams, support incident response, translate emerging threats into engineering requirements, and mentor engineers on secure coding and architecture.
Top Skills:
AbacAWSAzureC++CasbCi/CdCursorDatabricksDockerGCPGithub CopilotGoInfrastructure As CodeJavaKubernetesOauth2OidcPythonRbacReactSsoTypescript
Artificial Intelligence • Cloud • Information Technology • Machine Learning
Leads enterprise security engineering and architecture for a federal healthcare modernization program. Oversees ISSO and ISSE teams, ATO and System Security Plan activities, continuous monitoring, Zero Trust compliance, risk and control assessments, vulnerability remediation, application security testing, penetration testing, and federal security compliance. Provides technical direction, stakeholder communication, mentoring, and remediation planning across cloud, DevSecOps, development, testing, integration, and production environments.
Top Skills:
Access ControlAgileApplication Security TestingCloud ComputingCybersecurityDevsecopsEncryptionFedrampFismaIncident ResponseNist RmfNist Sp 800-53Penetration TestingPkiSafeScrumVulnerability ManagementZero Trust
Security
Implement, configure, optimize, and administer distributed LogRhythm SIEM deployments in AWS and Azure environments. Develop secure cloud infrastructure, manage security groups and storage, maintain SQL and Elasticsearch databases, troubleshoot networks and VPNs, automate operational tasks, document architectures, forecast deployment growth, and provide technical escalation support to SIEM engineers.
Top Skills:
Amazon EbsAmazon Ec2Amazon S3AWSAzureBashElasticsearchIpsecLinuxLogrhythmMitre Att&CkPowershellPythonSQLSreVpnWindows
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
