Principal Offensive Security Engineer

Meet the Moment with Alteryx

We're living through a once-in-a-generation shift in how work gets done. Data, automation, and AI are quickly becoming the center of every business decision - and Alteryx is leading the transformation.

You'll be working on the challenges that sit at the heart of modern business. No matter your role, the work you do will help organizations move faster, see more clearly, and tackle questions that used to feel impossible.

If you're ready to meet the moment with innovation, curiosity, and excellence, there's a place for you here.

Principal Offensive Security Engineer

Alteryx is searching for a Principal Offensive Security Engineer in the United States. Join a team that values diverse perspectives, technical curiosity, and collaboration to improve the security of our products and enterprise environments.

Position Overview

As a Principal Offensive Security Engineer, you will serve as a senior technical leader within Alteryx’s Offensive Security program. You will lead risk-prioritized penetration testing, red-team engagements, and adversary simulations across product and enterprise environments.

This is a highly hands-on role. You will personally scope and execute complex engagements while setting technical direction, improving testing methods, and mentoring other practitioners.

A key focus of this role will be the practical use of artificial intelligence in offensive security. You will develop and evaluate AI-assisted workflows that improve offensive testing and operational effectiveness.

You will also partner closely with Security Operations, Detection Engineering, Incident Response, Application Security, Cloud Security, IT, and Engineering to validate defensive controls and improve Alteryx’s ability to detect and respond to realistic adversary behavior.

Primary Responsibilities

• Lead risk-prioritized penetration testing and offensive security assessments across products, web applications, APIs, infrastructure, cloud, identity, SaaS, and enterprise technologies.
• Identify, validate, and safely exploit vulnerabilities and demonstrate how weaknesses can be chained into realistic attack paths.
• Scope, design, and execute red-team campaigns and adversary simulations based on relevant threats, emerging techniques, and business risk.
• Develop, validate, and incorporate AI-assisted workflows into offensive security activities, such as reconnaissance, campaign development, social engineering, tooling, and analysis.
• Develop custom scripts, tooling, payloads, and automation to support offensive security engagements.
• Conduct offensive security and red-team assessments with a primary focus on GCP and modern identity platforms, extending testing to AWS, Azure, and Kubernetes as relevant.
• Partner with SOC, Detection Engineering, Threat Hunting, and Incident Response teams to plan and execute purple-team exercises that validate telemetry, detections, investigation workflows, and response capabilities.
• Partner with engineering and defensive teams to prioritize remediation, retest fixes, and verify improvements to detections, logging, monitoring, playbooks, and defensive controls.
• Clearly document findings, attack paths, business impact, and recommended remediation, and communicate results to both technical and executive audiences.
• Own the technical direction and execution of the offensive security roadmap in partnership with security leadership. Mature testing methodologies and provide hands-on mentorship and technical pairing to other offensive security practitioners.
• Measure program effectiveness through verified remediation, reduced exposure to critical attack paths, and repeatable validation of detection and response coverage.

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent experience.
• 8+ years of relevant information security experience, including significant hands-on experience in penetration testing, red teaming, adversary simulation, or offensive security.
• Demonstrated experience independently leading complex penetration tests or offensive security engagements.
• Deep hands-on expertise in one or more core domains, such as application/API exploitation, cloud offensive security, identity, or enterprise environments, with practical working knowledge across other domains and the ability to chain weaknesses into realistic attack paths and assess business impact.
• Strong knowledge of attacker techniques across initial access, credential access, privilege escalation, persistence, lateral movement, defense evasion, and data access.
• Hands-on offensive security experience in at least one major cloud platform (GCP, AWS, or Azure) and modern identity environments, including technologies such as Active Directory, SAML, OAuth, OIDC, MFA, and SSO.
• Experience with modern offensive security tooling and frameworks across web, identity, network, and adversary-emulation testing.
• Ability to develop or modify offensive security tooling using languages such as Python, PowerShell, Bash, Go, or similar.
• Demonstrated hands-on experience incorporating AI into offensive security or red-team operations, with concrete examples of workflows or tools you developed or adapted, how you validated the results, and the operational benefits achieved.
• Demonstrated experience planning or leading purple-team exercises and translating offensive findings into defensive improvements.
• Strong understanding of MITRE ATT&CK and the ability to map offensive activity to adversary techniques and defensive coverage.
• Excellent written and verbal communication skills, including the ability to communicate technical risk to engineering teams, security leadership, and executives.
• Demonstrated experience mentoring offensive security engineers, setting technical direction, and influencing outcomes across engineering and security teams.

Preferred Qualifications

• Contributions to the offensive security or AI security community through conference presentations, open-source tooling, published research, vulnerability disclosures, or participation in industry working groups.
• Experience building or maturing an internal red-team or offensive security program.
• Experience conducting advanced adversary-emulation or assumed-breach exercises.
• Experience building AI integrations using agent frameworks, LLM APIs, or local or hosted models.
• Experience assessing AI-enabled applications, LLM-integrated systems, or agentic workflows.
• Additional depth in SaaS security, endpoint/EDR evasion, exploit development, or social engineering.
• Experience designing repeatable purple-team validation programs.
• Strong hands-on offensive security experience in GCP; experience assessing Kubernetes environments is also preferred.
• Relevant practical offensive security certifications such as OSCP, OSEP, OSWE, OSED, CRTO, GXPN, or comparable certifications.

Alteryx is committed to fair, equitable, and transparent compensation. Final compensation will be determined by various factors such as your relevant work experience, education, certifications, skills, and geographic location.

The salary range for this role in the United States is $183,000 - $200,000.

Employees may also be eligible for a wide range of other benefits, such as a bonus or commission, medical, retirement, financial, wellness, time off, employee discounts, and others.

Interested? Learn more and apply today at alteryx.com/careers!

Find yourself checking a lot of these boxes but doubting whether you should apply? At Alteryx, we support a growth mindset for our associates through all stages of their careers. If you meet some of the requirements and you share our values, we encourage you to apply. As part of our ongoing commitment to a diverse, equitable, and inclusive workplace, we’re invested in building teams with a wide variety of backgrounds, identities, and experiences.

Benefits & Perks:

Alteryx has amazing benefits for all Associates which can be viewed here.

For roles in San Francisco and Los Angeles: Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Alteryx will consider for employment qualified applicants with arrest and conviction records.

This position involves access to software/technology that is subject to U.S. export controls. Any job offer made will be contingent upon the applicant’s capacity to serve in compliance with U.S. export controls.