Cybersecurity Engineer

10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and leading global technology platforms. Our adversarial red teaming, model evaluations, and intelligence collection enable engineering, safety, and security teams to stay ahead of evolving threats and deploy AI systems safely.

We are seeking a Cybersecurity Engineer to build secure, reproducible infrastructure and tooling for AI security evaluations You'll work across cloud infrastructure, security automation, internal tooling, and controlled offensive security testing to help identify and measure emerging AI-enabled cyber risks.

This role is ideal for engineers who enjoy solving difficult technical problems, building scalable security solutions, and working alongside cross-functional teams at the forefront of AI security.

• →Build tools, automation, and infrastructure that support scalable adversarial testing of AI systems and applications.
• →Build and maintain realistic, repeatable, security test environments using cloud infrastructure and automation tools such as Terraform.
• →Collaborate with red teamers and engineers to reproduce, investigate, and remediate vulnerabilities uncovered during AI security assessments.
• →Develop and automate attack simulations to validate security controls, identify potential failure modes, and improve the resilience of AI-powered systems.
• →Conduct threat modeling and security design reviews for new systems and features.
• →Collaborate closely with software engineers to integrate security throughout the development lifecycle.

• 3–5 years of professional experience in Cybersecurity, Security Engineering, Software Engineering, or a related field.
• Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a closely related topic.
• Professional experience with Python.
• Experience using git/github in a collaborative environment.
• Experience building or securing cloud environments using Amazon Web Services (AWS) or Google Cloud Platform (GCP).
• Strong understanding of Linux systems, networking, and modern web technologies.
• Experience automating cloud infrastructure using an Infrastructure as Code tool (Terraform preferred).
• Familiarity with Docker, Kubernetes and various virtualization technology stacks
• Familiarity with large language models (LLMs), AI systems, or AI security concepts.
• Demonstrated hands-on experience conducting penetration tests, red team assessments, adversary emulation, or comparable offensive security work.
• Strong understanding of authentication, authorization, and common web security vulnerabilities.
• Excellent debugging and problem-solving skills.
• Strong written and verbal communication skills.

• Experience translating offensive-security findings into repeatable attack simulations, evaluation tooling, detections, or security-control improvements.
• Experience with CI/CD security and DevSecOps practices.
• Knowledge of OWASP Top 10 and common cloud attack techniques.
• Experience with detection engineering or SIEM platforms.
• Experience building internal developer tools or security platforms.
• Security certifications such as GSEC, OSCP, or cloud security certifications.
• Contributions to open-source security projects or participation in Capture the Flag (CTF) competitions are a plus.
• Experience working in fast-paced, high-growth, or start-up environments. 

• Builder mentality with a passion for solving difficult engineering problems.
• Curiosity about emerging cyber threats and AI security.
• Ability to thrive in ambiguous, fast-moving environments.
• Strong ownership and bias toward action.
• Collaborative mindset and eagerness to work across technical and non-technical teams.
• Continuous learner who enjoys experimenting with new technologies.