Skip to content

Open nowPosted 21 hours ago

Red Team Engineer

Reality Defender7 open roles

Pay
$155,000 – $185,000 a year
Where
New York City
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowRed Team EngineerReality Defender · New York City
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Reality Defender's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Reality Defender postings stay open a median of 16 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 21 hours ago

Reality Defender median: 16 days open

The posting

WHO WE ARE.

Reality Defender is an award-winning cybersecurity company helping enterprises and governments detect deepfakes and AI-generated media. Utilizing a patented multi-model approach, Reality Defender is robust against the bleeding edge of generative platforms producing video, audio, imagery, and text media. Reality Defender's API-first deepfake detection platform empowers teams and developers alike to identify fraud, disinformation campaigns, and harmful deepfakes in real time.

Backed by world class investors including DCVC, Illuminate Financial, Y Combinator, Booz Allen Hamilton, IBM, Accenture, Rackhouse, and Argon VC, Reality Defender works with leading enterprise clients, financial institutions, and governments in order to ensure AI-generated media is not used for malicious purposes.

Youtube: Reality Defender Wins RSA Most Innovative Startup

THE RED TEAM ROLE

Reality Defender's AI Red Team exists to break our own detection models before adversaries do. As a Red Team Engineer, you'll get your hands on the newest deepfake tools the moment they appear — voice clones, real-time face swaps, injection attacks, multimodal impersonations — use them the way real attackers would, and turn every failure you uncover into a measurable fix shipped alongside our AI and Data teams. This is a full-time role based at our NYC headquarters or remote within the U.S., reporting to VP of Product. Responsibilities include:

- Run continuous adversarial testing against our detection models across audio, video, image, and text, reproducing new generative tools and techniques as they're released and stress-testing them against production models.

- Build realistic, end-to-end attack simulations that mirror how bad actors actually operate — cloned voices in call centers, real-time synthetic video in onboarding flows and job interviews, virtual camera and media injection, and coordinated cross-channel impersonation.

- Build and maintain repeatable red team infrastructure: test harnesses, attack catalogs, and an evolving adversarial dataset that every model release is validated against.

- Close the loop on findings — prioritize them, hand them to AI scientists and engineers with clean reproduction steps, and verify fixes through regression testing so they stick.

- Track the generative AI landscape (open-source models, commercial tools, research papers, and threat actor tradecraft) and triage which techniques are most likely to be weaponized next.

- Partner with Product to shape roadmap priorities based on what red team findings reveal.

- Support Sales, Marketing, and Solutions Engineering with credible, publishable research and threat briefings for enterprise and government customers.

- Contribute to adversarial testing of the broader platform — APIs and integrations — in partnership with Security.

- Help define the ethical guidelines and safe-handling practices for synthetic media used in testing.

WHO YOU ARE.

- 4+ years of experience in offensive security, adversarial ML, AI red teaming, or ML engineering with a strong adversarial focus.

- Hands-on experience generating synthetic media — voice cloning and TTS, face swap, lip-sync, diffusion-based image and video tools — in an offensive or research context, not just reading about it.

- Strong Python skills and practical ML fluency (PyTorch or similar): you can build attack tooling, automate testing pipelines, and reason about why a model fails, not just that it did.

- Working knowledge of adversarial ML techniques — evasion, adversarial perturbations, compression and post-processing attacks, data poisoning — and how to measure model robustness.

- Clear communicator who can turn technical findings into prioritized, actionable guidance for engineers and non-technical audiences alike, and who thrives with ambiguity and minimal supervision.

- Background in media forensics, signal processing, speech/audio, or computer vision. (nice to have)

- Traditional red team or penetration testing experience (cloud, APIs, web), relevant certifications (e.g., OSCP), or familiarity with AI security tooling such as Garak, PyRIT, or the Adversarial Robustness Toolbox. (nice to have)

- Published research, conference talks, CVEs, or open-source contributions in adversarial ML, deepfakes, or AI security. (nice to have)

WITHIN 1 MONTH, YOU'LL…

- Get up to speed on our detection model architecture across modalities, the current red team program, test harnesses, and adversarial dataset.

- Meet your AI, Data, Product, and Security counterparts to understand how findings are triaged and remediated today.

- Reproduce a set of recently released generative tools and techniques and run them against our production models.

- Deliver your first written findings report with prioritized detection gaps.

WITHIN 3 MONTHS, YOU'LL…

- Own a defined attack area end-to-end (e.g., real-time voice attacks or media injection).

- Have expanded the attack catalog and test harness with new techniques and automation that reduces manual testing time.

- Have driven at least one finding through remediation and verified the fix through regression testing.

- Have established a regular cadence for sharing threat landscape updates with the AI and Product teams.

WITHIN 6 MONTHS, YOU'LL…

- Have made red team testing a standard step in the model release process for your attack area.

- Have built multimodal, real-time attack simulations (combined voice and video, conversational attacks) that reflect real operating conditions.

- Be showing measurable improvement in model robustness against the adversarial dataset, tracked release over release.

- Have contributed research to at least one external publication, customer briefing, or sales enablement asset.

WITHIN 12 MONTHS, YOU'LL…

- Be recognized internally as a go-to authority on how deepfakes are made and how they evade detection.

- Have built adversarial testing infrastructure that scales across every modality with minimal manual effort.

- Have red team insights directly shaping the product roadmap and how we talk about risk with customers and government partners.

- Be identifying and leading testing on the next generation of threats — such as AI agent callers and real-time multimodal impersonation — before they show up in production.

WHAT WE OFFER.

Reality Defender offers the following benefits to all our employees, regardless of location:

- Healthcare plans with 100% premium coverage for employees and partial coverage available for dependents

- Dental and Vision plans with 100% premium coverage for employees and their dependents

- Short/Long-term disability and life insurance plans with 100% premium coverage for employees

- FSA/HSA and 401k programs

- Equity compensation

- 20 days of PTO per year

- 12 weeks of Parental Leave

- Learning and Development budget

- Monthly wellness benefits

- Annual company-sponsored offsite

For employees working from Reality Defender's HQ in NYC, we offer the following benefits:

- Daily in-office lunch through UberEats

- Commuter benefits

- Remote Fridays

- Happy Hours and other local events

Base salary range: $155,000 - 185,000 based on experience and location. Includes equity.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Reality Defender's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Reality Defender's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Reality Defender's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.