Build and automate secure, reproducible cloud infrastructure and tooling to support adversarial testing of AI systems. Collaborate with red teamers and engineers to reproduce, remediate, and simulate attacks, perform threat modeling and security reviews, and integrate security across the development lifecycle.
About 10a Labs: 10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and leading global technology platforms. Our adversarial red teaming, model evaluations, and intelligence collection enable engineering, safety, and security teams to stay ahead of evolving threats and deploy AI systems safely.
We are seeking a Cybersecurity Engineer to build secure, reproducible infrastructure and tooling for AI security evaluations You'll work across cloud infrastructure, security automation, internal tooling, and controlled offensive security testing to help identify and measure emerging AI-enabled cyber risks.
This role is ideal for engineers who enjoy solving difficult technical problems, building scalable security solutions, and working alongside cross-functional teams at the forefront of AI security.
What You'll Do- Build tools, automation, and infrastructure that support scalable adversarial testing of AI systems and applications.
- Build and maintain realistic, repeatable, security test environments using cloud infrastructure and automation tools such as Terraform.
- Collaborate with red teamers and engineers to reproduce, investigate, and remediate vulnerabilities uncovered during AI security assessments.
- Develop and automate attack simulations to validate security controls, identify potential failure modes, and improve the resilience of AI-powered systems.
- Conduct threat modeling and security design reviews for new systems and features.
- Collaborate closely with software engineers to integrate security throughout the development lifecycle.
- 3–5 years of professional experience in Cybersecurity, Security Engineering, Software Engineering, or a related field.
- Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a closely related topic.
- Professional experience with Python.
- Experience using git/github in a collaborative environment.
- Experience building or securing cloud environments using Amazon Web Services (AWS) or Google Cloud Platform (GCP).
- Strong understanding of Linux systems, networking, and modern web technologies.
- Experience automating cloud infrastructure using an Infrastructure as Code tool (Terraform preferred).
- Familiarity with Docker, Kubernetes and various virtualization technology stacks
- Familiarity with large language models (LLMs), AI systems, or AI security concepts.
- Demonstrated hands-on experience conducting penetration tests, red team assessments, adversary emulation, or comparable offensive security work.
- Strong understanding of authentication, authorization, and common web security vulnerabilities.
- Excellent debugging and problem-solving skills.
- Strong written and verbal communication skills.
- Experience translating offensive-security findings into repeatable attack simulations, evaluation tooling, detections, or security-control improvements.
- Experience with CI/CD security and DevSecOps practices.
- Knowledge of OWASP Top 10 and common cloud attack techniques.
- Experience with detection engineering or SIEM platforms.
- Experience building internal developer tools or security platforms.
- Security certifications such as GSEC, OSCP, or cloud security certifications.
- Contributions to open-source security projects or participation in Capture the Flag (CTF) competitions are a plus.
- Experience working in fast-paced, high-growth, or start-up environments.
- Builder mentality with a passion for solving difficult engineering problems.
- Curiosity about emerging cyber threats and AI security.
- Ability to thrive in ambiguous, fast-moving environments.
- Strong ownership and bias toward action.
- Collaborative mindset and eagerness to work across technical and non-technical teams.
- Continuous learner who enjoys experimenting with new technologies.
- Salary Range: $135K–$160K, depending on experience and location
- Bonus: Performance-based annual bonus
- Professional Development: Support for conferences, continuing education, or leadership training
- Work Environment: Fully remote, U.S.-based
- Health Benefits: Comprehensive health, dental, and vision coverage
- Time Off: Generous PTO and paid holiday schedule
- Retirement: 401(k) plan
Similar Jobs
Automotive • Big Data • Information Technology • Robotics • Software • Transportation • Manufacturing
Design and implement scalable zero trust and secure access architectures across complex hybrid networks. Conduct deep analysis of network access paths, author reusable reference architectures, implement mesh VPN and identity-aware proxy solutions, automate deployments with IaC and CI/CD, collaborate cross-functionally, drive governance and metrics, mentor engineers, and participate in incident response and remediation.
Top Skills:
APIsCi/CdCloud PlatformsDatabasesDnsFirewallsIdentity And Access Management (Iam)Identity-Aware ProxyInfrastructure As CodeLoad BalancersMacro-SegmentationMesh VpnMicro-SegmentationPolicy-As-CodeProxiesRoutingScriptingVpnZero Trust
Real Estate
Lead design, implementation, and operation of enterprise security controls across endpoint, network, cloud, and identity. Own vulnerability management, incident response, detection engineering, automation, and Microsoft/Azure security initiatives. Mentor staff, support audits and compliance, drive remediation with cross-functional teams, and maintain documentation, runbooks, and security roadmaps.
Top Skills:
Active DirectoryAPIsAzureCis ControlsConditional AccessCvssDlpEdr/XdrEmail FilteringEndpoint ProtectionEntra IdFirewallIdentity ProtectionIds/IpsLinux/UnixMicrosoft 365Microsoft DefenderMicrosoft SentinelMitre Att&CkNistOwaspPowershellPythonSIEMStorageThreat IntelligenceVirtualizationVulnerability ManagementWeb FilteringWindows ServerZero Trust
Healthtech
Lead complex security investigations, threat hunting, and incident response across the enterprise. Design and maintain cybersecurity controls, monitor security systems, mentor teammates, lead projects, coordinate with Privacy/Legal/law enforcement, and provide training and presentations. Ensure regulatory and technical compliance (HIPAA, NIST, PCI) and support after-hours incident response and travel to facilities as needed.
Top Skills:
AesDark Web MonitoringData Loss Prevention (Dlp)EdiscoveryEndpoint Detection And Response (Edr)Exact Data MatchingExcelFirewallsHipaaMedical Device ManagementMicrosoft OutlookNist CsfNist Sp 800-82R3Ot/Iot SolutionsPci DssPowerPointProxiesRemote Access TechnologiesRisk Management PlatformsSecure Email GatewaySftpSIEMSshTeamsTlsVpnsVulnerability ScannersWord
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
