Cybersecurity Engineer - Red Team Operation

Our requirements

• Want to be proud of the impact they make; they value high-quality security reviews and engage in substantive discussions on software engineering and security best practices;
• Are open to developing soft skills and embracing a growth mindset through active participation in team retrospectives and cross-team collaborations;
• Are excited about adopting and securing AI technologies, being ready to incorporate AI coding and security assistants into their daily work to maximize efficiency;
• Can look for effective, business-enabling solutions to the security requirements set by our ecosystem;
• Want to constantly develop and update their knowledge in a rapidly shifting threat landscape;
• Know English at at least B2 level and Polish at C1 level.
• Demonstrate high independence and a self-driven approach - you are capable of taking full, end-to-end ownership of offensive engagements (from scoping and initial preparation, through execution, to final reporting and remediation guidance);
• Have hands-on experience managing Red Team operational environments, including Command & Control (C2) frameworks, redirectors and supporting infrastructure;
• Can develop custom payloads, loaders, and exploitation scripts (bypassing modern EDR/XDR) with minimal reliance on public tools;
• Are skilled in executing operations across the MITRE ATT&CK framework in cloud and on-prem environments;
• Are keen on leveraging automation and AI-assisted techniques to improve reconnaissance efficiency and innovate offensive tactics;
• Are skilled in executing operations across the MITRE ATT&CK framework (lateral movement, persistence, evasion) in cloud and on-prem environments;
• Possess deep expertise in manual network/web application exploitation and conducting end-to-end sociotechnical/phishing assessments.

Your responsibilities

• Massive Scale & Security Challenges: Secure, test and optimize a world-class, cloud and on-prem environment handling thousands of requests per minute. This is high-availability, high-performance security engineering in practice.
• Modern Tech Stack: Work within an advanced ecosystem where core technologies include specialized offensive and defensive security tools, automated SAST/DAST pipelines, C2 frameworks and cutting-edge cryptography. We are also pioneering the security of production-used AI models.
• True Ownership & Autonomy: We live by a "you build it, you run it" philosophy. You'll join an autonomous team with full ownership of your security services - from threat modeling and attack simulation to deploying protective guardrails.
• Complex Architectural Puzzles: From securing distributed systems to tackling novel AI vulnerabilities, you'll solve complex engineering problems that directly protect a massive, real-time marketplace.

About the project

#goodtobehere means that:

What we offer

• Well-located offices (with e.g. fully equipped kitchens, bicycle parking, terraces full of greenery) and excellent work tools (e.g., raised desks, ergonomic chairs, interactive conference rooms).
• A 16" or 14" MacBook Pro or corresponding Dell with Windows (if you don't like Macs) and all the necessary accessories.
• A wide selection of fringe benefits in a cafeteria plan - you choose what you like (e.g., medical, sports or lunch packages, insurance, purchase vouchers).
• English classes that we pay for related to the specific nature of your job.
• A training budget, inter-team tourism (see more here), hackathons, and an internal learning platform where you will find multiple trainings.
• An additional day off for volunteering, which you can use alone, with a team, or with a larger group of people connected by a common goal.
• Social events for Allegro people - Spin Kilometers, Family Day, Fat Thursday, Advent of Code, and many other occasions we enjoy.

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of foreign language classes
• sharing the costs of professional training & courses
• life insurance
• flexible working time
• integration events
• no dress code
• leisure zone
• extra social benefits