Build and automate secure, reproducible cloud infrastructure and tooling to support adversarial testing of AI systems. Collaborate with red teamers and engineers to reproduce, remediate, and simulate attacks, perform threat modeling and security reviews, and integrate security across the development lifecycle.
About 10a Labs: 10a Labs is the safety and threat-intelligence layer trusted by frontier AI labs, AI unicorns, Fortune 10 companies, and leading global technology platforms. Our adversarial red teaming, model evaluations, and intelligence collection enable engineering, safety, and security teams to stay ahead of evolving threats and deploy AI systems safely.
We are seeking a Cybersecurity Engineer to build secure, reproducible infrastructure and tooling for AI security evaluations You'll work across cloud infrastructure, security automation, internal tooling, and controlled offensive security testing to help identify and measure emerging AI-enabled cyber risks.
This role is ideal for engineers who enjoy solving difficult technical problems, building scalable security solutions, and working alongside cross-functional teams at the forefront of AI security.
What You'll Do- Build tools, automation, and infrastructure that support scalable adversarial testing of AI systems and applications.
- Build and maintain realistic, repeatable, security test environments using cloud infrastructure and automation tools such as Terraform.
- Collaborate with red teamers and engineers to reproduce, investigate, and remediate vulnerabilities uncovered during AI security assessments.
- Develop and automate attack simulations to validate security controls, identify potential failure modes, and improve the resilience of AI-powered systems.
- Conduct threat modeling and security design reviews for new systems and features.
- Collaborate closely with software engineers to integrate security throughout the development lifecycle.
- 3–5 years of professional experience in Cybersecurity, Security Engineering, Software Engineering, or a related field.
- Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a closely related topic.
- Professional experience with Python.
- Experience using git/github in a collaborative environment.
- Experience building or securing cloud environments using Amazon Web Services (AWS) or Google Cloud Platform (GCP).
- Strong understanding of Linux systems, networking, and modern web technologies.
- Experience automating cloud infrastructure using an Infrastructure as Code tool (Terraform preferred).
- Familiarity with Docker, Kubernetes and various virtualization technology stacks
- Familiarity with large language models (LLMs), AI systems, or AI security concepts.
- Demonstrated hands-on experience conducting penetration tests, red team assessments, adversary emulation, or comparable offensive security work.
- Strong understanding of authentication, authorization, and common web security vulnerabilities.
- Excellent debugging and problem-solving skills.
- Strong written and verbal communication skills.
- Experience translating offensive-security findings into repeatable attack simulations, evaluation tooling, detections, or security-control improvements.
- Experience with CI/CD security and DevSecOps practices.
- Knowledge of OWASP Top 10 and common cloud attack techniques.
- Experience with detection engineering or SIEM platforms.
- Experience building internal developer tools or security platforms.
- Security certifications such as GSEC, OSCP, or cloud security certifications.
- Contributions to open-source security projects or participation in Capture the Flag (CTF) competitions are a plus.
- Experience working in fast-paced, high-growth, or start-up environments.
- Builder mentality with a passion for solving difficult engineering problems.
- Curiosity about emerging cyber threats and AI security.
- Ability to thrive in ambiguous, fast-moving environments.
- Strong ownership and bias toward action.
- Collaborative mindset and eagerness to work across technical and non-technical teams.
- Continuous learner who enjoys experimenting with new technologies.
- Salary Range: $135K–$160K, depending on experience and location
- Bonus: Performance-based annual bonus
- Professional Development: Support for conferences, continuing education, or leadership training
- Work Environment: Fully remote, U.S.-based
- Health Benefits: Comprehensive health, dental, and vision coverage
- Time Off: Generous PTO and paid holiday schedule
- Retirement: 401(k) plan
Similar Jobs
Security
Secure and accredit multi-tenant, multi-classification cloud environments across development, integration, and test enclaves. Implement JSIG, NIST, STIG, RMF, and ATO requirements; maintain SSPs, POA&Ms, and continuous-monitoring evidence; validate vulnerability, application-security, container, and infrastructure-as-code outputs; support secure cloud and DevSecOps design; and provide cybersecurity guidance for capability-provider artifacts and promotion decisions.
Top Skills:
Acas/NessusAnsibleArgo CdAtoContainer SecurityDastDevsecopsGrafanaHelmJIRAJsigMls/MilsNist Sp 800-53Poa&MPrometheusRmfSastSbomScaSspStigTerraformXactaZero Trust
Other
Secures software applications, cloud infrastructure, and IT systems by conducting assessments, threat modeling, vulnerability management, penetration testing, and incident response. Integrates security testing into the SDLC and CI/CD, supports AWS security architecture, improves security tools and dashboards, maintains documentation, and educates technical and non-technical stakeholders about security best practices, phishing, and social engineering.
Top Skills:
AWSCi/CdDynamic Application Security Testing (Dast)Github Advanced SecurityStatic Application Security Testing (Sast)
Artificial Intelligence • Cloud • Machine Learning • Software • Business Intelligence • Cybersecurity • Big Data Analytics
Engineer and assess Zero Trust security capabilities across identity, devices, networks, applications, and data. Translate federal security requirements into technical controls, support authorization activities, review security evidence, analyze vulnerabilities and control gaps, manage remediation plans, and advise stakeholders on security architecture and compliance. Assess cloud, hybrid, and on-premises environments for authorization readiness and continuous monitoring, while preparing technical reports, risk summaries, and briefings.
Top Skills:
FedrampFismaNist Risk Management FrameworkNist Sp 800-53Zero Trust
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory
