Security Engineer - Red Team

About Workato Workato transforms technology complexity into business opportunity. As the leader in enterprise orchestration, Workato helps businesses globally streamline operations by connecting data, processes, applications, and experiences. Its AI-powered platform enables teams to navigate complex workflows in real-time, driving efficiency and agility. Trusted by a community of 400,000 global customers, Workato empowers organizations of every size to unlock new value and lead in today’s fast-changing world. Learn how Workato helps businesses of all sizes achieve more at workato.com. Responsibilities Join our Product Security team as a Security Engineer - Red Team and help secure the future of AI automation through offensive security operations. *This is a remote position in either Spain or Portugal. *You'll simulate real-world adversarial attacks against our cloud architecture, AI model endpoints, and complex multi-tenant SaaS platform while playing a key role in strengthening our defenses during our Agentic AI Transformation. You will play a pivotal role in identifying security weaknesses, validating defensive capabilities, and improving our security posture through adversarial testing. Your findings will directly influence product security architecture and drive security improvements across a diverse set of customer deployments. Key responsibilities include: - Adversarial Exercises and Penetration Testing: Conduct red team exercises and penetration tests to simulate real-world attacks and validate defensive controls - Exploitation and Vulnerability Research: Perform vulnerability research and exploitation to validate attack paths and contribute to the security community - Threat Modeling and Attack Simulation: Collaborate on threat modeling to anticipate attacker techniques and strengthen defensive strategies - SecOps and Bug Bounty Collaboration: Partner with Security Operations and Bug Bounty teams to enhance detection, response, and organizational resilience - External Testing Coordination: Coordinate external red team and penetration testing engagements and third-party security assessments - Security Automation and Tooling: Develop automated tools and frameworks to scale offensive security operations across systems and applications This role offers the opportunity to conduct offensive security research against mission-critical systems deployed globally while working with AI and cloud technologies. If you're passionate about thinking like an attacker to build stronger defenses, this role could be perfect for you.