Manager, Red Team: Product Security Engineering

About this role

Job Description   Manager, Red Team: Product Security Engineering 

About SailPoint   SailPoint is the leader in identity security for the cloud enterprise. Built on AI and ML, our Identity Security Cloud Platform delivers the right level of access to the right identities and resources at the right time, matching the scale, velocity, and changing needs of today's modern enterprise. 

About the Role   You will build and lead a continuous adversarial testing program against SailPoint's next-generation Atlas Platform, using frontier AI as a force multiplier, not a novelty.  A typical day: reviewing results from overnight autonomous testing campaigns, chaining minor vulnerabilities into high-impact proof-of-concept exploits, or handing validated attack playbooks to the CISO's Red Team. You won't write reports that sit in a queue. You will translate adversarial findings into secure design improvements that change how engineering builds software. 

About the Team   This is a greenfield offensive security unit within Product Security Engineering, reporting to the Director of Engineering Product Security. The team exists to challenge and secure our identity governance systems, AI-powered product features, and core platform services through continuous adversarial validation, not annual pen tests. 

Roadmap for Success  30 Days — Assess & Design   • Complete a comprehensive review of the identity platform architecture, existing security practices, and current attack surface. 

• Outline the optimal Red Team structure and identify critical hires based on the program's mandate for agentic AI and continuous testing. 

• Deliver an initial strategic vision and program roadmap, clearly distinguishing this program from traditional penetration testing. 

    60 Days — Build & Prepare   • Open recruiting pipelines and begin actively sourcing, screening, and extending offers for initial Red Team members. 

• Draft rules of engagement in collaboration with Product Security and Engineering leadership. 

• Complete a preliminary attack surface map of the core identity platform, prioritizing AI product features and agentic orchestration layers. 

• Formalize the CISO Red Team partnership with a quarterly cadence for method transfer, tooling configurations, and attack playbooks. 

  90 Days — Initialize & Execute   • Formally define initial scope and target areas, prioritizing identity platform core and AI features. 

• Select, deploy, and configure at least one agentic offensive security platform for autonomous source code analysis or vulnerability chaining. 

• Plan and execute the first short-cycle adversarial campaign, establishing initial operational processes. 

• Stand up preliminary threat intelligence integration for identity platforms, SaaS infrastructure, and AI/ML attack techniques. 

  6 Months — Scale & Formalize   • At least 50% of target headcount onboarded and actively contributing to adversarial campaigns with demonstrated proficiency in agentic AI tooling. 

• Minimum three distinct continuous adversarial campaigns executed, including dedicated AI product feature testing, producing actionable findings. 

• Minimum two detailed exploitation narratives resulting in concrete secure design improvements or SSDLC changes by engineering teams. 

• CISO Red Team proving ground fully established, including at least one joint adversarial exercise completed. 

  1 Year — Full Maturity & Impact   • Full team operational capacity with agentic AI as a core capability, not a supplement. 

• Overnight autonomous campaigns running continuously, delivering prioritized findings daily at 3–5x coverage of team size. 

• Measurable reduction in high-severity vulnerabilities driven by Red Team findings feeding secure design improvements, threat model updates, and SSDLC enhancements. 

• Attack methodology continuously reflecting current real-world TTPs, APT campaigns targeting identity providers, supply chain compromise vectors, and emerging AI-specific attack techniques. 

  What We're Looking For  Proven offensive security operator who builds teams, not just finds bugs. You have led or built red team programs, not just executed engagements. You know how to hire offensive engineers, define scope, manage rules of engagement, and translate findings into engineering action. 

Agentic AI as an offensive weapon, not a buzzword. Hands-on experience with AI-powered offensive tooling, agentic pen testing platforms, or autonomous exploit generation. You know the difference between a scanner with an AI label and a system that reasons about attack paths. 

Source code analysis depth beyond scanning. You find vulnerabilities through semantic analysis, not pattern matching. You read code, reason about exploitability, and build proof-of-concept exploits across multiple languages. You understand the vulnerability classes that matter for identity platforms: authentication flow weaknesses, authorization logic flaws, entitlement calculation errors, and tenant isolation failures. 

AI/LLM attack surface expertise. You have tested adversarial attacks against AI systems, prompt injection, goal redirection, RAG poisoning, model supply chain compromise, or agentic scope escape. You know OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF as applied to offensive testing. 

Chain analysis and multi-step exploitation thinking. You think in attack paths, not individual findings. When you find a medium-severity issue, your instinct is to ask what it enables when combined, not to file it and move on. 

Communication that drives engineering action. You write exploitation narratives that a VP of Engineering reads and acts on. You present to executives without losing technical credibility. A finding without a remediation path and a business impact statement is a finding that gets deprioritized, and you know that. 

Identity and access management domain knowledge. OAuth/OIDC/SAML weaknesses, entitlement edge cases, tenant isolation bo

Similar jobs

• Manager, Product Security Engineering — Dragos · Remote
• Senior Security Engineer, Red Team — Doordashusa · Remote
• Senior Security Engineering Manager, Product Security — Upstart · Remote
• Engineering Manager, Red Team — Doordashusa · Remote
• Manager - Product Security — Microchip Technology · AZ - Chandler
• Senior Product Security Engineer — Harvey · San Francisco
• Senior Product Security Engineer — Chainguard · Remote
• Senior Product Security Engineer — Persona · San Francisco