Lead IT Security, AI Redteamer

DKB Code Factory GmbH

. Lead and perform AI-assisted red team engagements across web applications, APIs, cloud workloads and infrastructure, and deliver prioritized technical reports and executive summaries.

Posted 7/17/2026full-timeRemote • 🇪🇸 SpainSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading AI-assisted red team engagements, with a strong focus on offensive security testing across web applications, APIs, and cloud environments. Proficient in integrating security checks into CI/CD pipelines and providing clear remediation guidance while managing team development and stakeholder engagement.

Highest-signal resume keywords

Red Team EngagementsOffensive Security TestingOWASP Top 10Burp SuiteCloud Security (AWS)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Red Team EngagementsOffensive Security TestingOWASP Top 10API Security Top 10CVSSScripting (Python, Bash)Automation SkillsCloud Security (AWS)KubernetesContainer Security

Soft Skills

Stakeholder ManagementWritten CommunicationVerbal Communication

Tools & Technologies

Burp SuiteOWASP ZAPNmapMetasploitNessus/OpenVASKali LinuxSIEM/Logging PlatformsOpenSearchGrafana

Industry Keywords

Financial ServicesRegulated Environments

Tech Stack

Tools & technologies

AWSCloudGrafanaKubernetesLinuxPythonSDLC

About the role

Key responsibilities & impact

Lead and perform AI-assisted red team engagements across web applications, APIs, cloud workloads and infrastructure, and deliver prioritized technical reports and executive summaries.
Manage and develop two direct reports, run regular 1:1s, performance reviews, and development plans; contribute to hiring and team growth.
Provide clear remediation guidance and validate fixes, prioritizing critical and high findings.
Configure, tune and maintain offensive tooling and develop automation playbooks that reduce manual triage and false positives.
Integrate recurring security checks into CI/CD pipelines and platform processes to enable continuous testing and attack-surface reduction.
Lead remediation workshops and knowledge transfers, and produce reusable runbooks for product and platform teams.
Coordinate triage and handoff with SOC, IT Ops, product teams and central IT Security, and support governance and compliance mapping (OWASP, API Security Top 10, CVSS).

Requirements

What you’ll need

Proven hands on experience in red team or offensive security testing across web apps, APIs, and cloud environments.
Solid understanding of OWASP Top 10, API Security Top 10, CVSS, secure SDLC, threat modeling.
Experience with AI assisted offensive tooling or demonstrable integration of ML/NLP techniques into offensive workflows (e.g., Mythos, GPT Cyber).
Strong practical experience with Burp Suite, OWASP ZAP, Nmap, Metasploit, Nessus/OpenVAS, and Kali Linux.
Solid cloud security knowledge, particularly AWS, and experience with Kubernetes and container security.
Scripting and automation skills (Python, Bash) and experience integrating security checks in Git/GitLab CI or equivalent CI systems.
Strong stakeholder management skills, with the ability to engage confidently with engineering teams, senior stakeholders and leadership.
Excellent written and verbal communication skills in English.
Experience with SIEM/logging platforms, OpenSearch, Grafana, or production monitoring stacks and prior experience in financial services or regulated environments are a plus.

Benefits

Comp & perks

From Morning Daily to Afterwork Drink, team spirit is essential to us.
We not only share fun & laughter, but also honest opinions - because that's how we grow: We exchange ideas, give support in our personal development, and celebrate success together! Besides our great community, we also offer numerous other benefits.