Responsibilities

Every operator knows the ending. You found the path, chained it to access the crown jewel, and wrote it up. Then the engagement closed, the environment changed the next week, and nobody walked that kill chain again until next year's test. Armadin is built to end that cycle.
We're building an agentic attacker swarm. These are specialized AI agents running custom models that discover, exploit, and chain vulnerabilities across external, internal, identity, cloud, and application attack surfaces. They run continuously, at machine speed, against live production environments. Until recently, nobody could put a nation-state-caliber adversary inside every network around the clock. That's the hyperattack, and it's what we do. In one recent engagement, the swarm generated more than 17 million offensive actions in three days and validated 38 attack paths. That's the scale your tradecraft will run at.
As a Senior Red Team Operator, your tradecraft is the training signal. You'll run hands-on operations, and then you'll encode how you think into the reasoning our agents use at scale: how you pick a foothold, abuse an application's logic, pivot through identity, separate what's actually exploitable from scanner noise, and map the blast radius once you're in. You'll pressure-test full kill chains end to end, find where the swarm is naive, and teach it to move like an expert, using AI throughout your own workflow to go faster and deeper.
The problems here are new ones:
What does a kill chain look like when it can branch a thousand ways in parallel?
How do you prove exploitability instead of just flagging it?
What does a continuous hyperattack find that a two-week engagement never could?
You'll work alongside operators who have spent decades on the front lines of red teaming and the AI engineers turning that experience into autonomous defense. It's a small, scrappy group with high ownership, and the work you ship reaches enterprises through industry leading partners. If you've ever finished an op thinking "imagine running this everywhere, all the time," this is where you get to do it.
Run full kill chains, not checklists. Attack LLMs, agents, RAG pipelines, and the applications wrapped around them the way a real adversary would. Chain prompt injection, tool abuse, and integration flaws into paths no guardrail benchmark ever sees.
Prove what's exploitable. Turn a jailbreak or odd model behavior into a working, reproducible exploit with clear evidence of impact. Separate real risk from refusal-bypass noise.
Map the blast radius. Follow every foothold to its end, from a poisoned document or hijacked agent to tool calls, credentials, identity, cloud, and data. Show what an attacker could actually reach through the model.
Hijack the agent. Abuse tool and function calling, MCP servers, plugins, memory, and multi-agent handoffs to make agents act against their owners. Target excessive agency, confused-deputy flaws, and broken trust boundaries.

Senior Red Team Operator, AI/LLM at Armadin · LumiJobs

Senior Red Team Operator, AI/LLM

Responsibilities

Benefits

Company

Armadin

More roles at Armadin