Meet the Moment with Alteryx
We're living through a once-in-a-generation shift in how work gets done. Data, automation, and AI are quickly becoming the center of every business decision - and Alteryx is leading the transformation.
You'll be working on the challenges that sit at the heart of modern business. No matter your role, the work you do will help organizations move faster, see more clearly, and tackle questions that used to feel impossible.
If you're ready to meet the moment with innovation, curiosity, and excellence, there's a place for you here.
Principal Offensive Security Engineer
Alteryx is searching for a Principal Offensive Security Engineer in the United States. Join a team that values diverse perspectives, technical curiosity, and collaboration to improve the security of our products and enterprise environments.
Position Overview
As a Principal Offensive Security Engineer, you will serve as a senior technical leader within Alteryx’s Offensive Security program. You will lead risk-prioritized penetration testing, red-team engagements, and adversary simulations across product and enterprise environments.
This is a highly hands-on role. You will personally scope and execute complex engagements while setting technical direction, improving testing methods, and mentoring other practitioners.
A key focus of this role will be the practical use of artificial intelligence in offensive security. You will develop and evaluate AI-assisted workflows that improve offensive testing and operational effectiveness.
You will also partner closely with Security Operations, Detection Engineering, Incident Response, Application Security, Cloud Security, IT, and Engineering to validate defensive controls and improve Alteryx’s ability to detect and respond to realistic adversary behavior.
Primary Responsibilities
Lead risk-prioritized penetration testing and offensive security assessments across products, web applications, APIs, infrastructure, cloud, identity, SaaS, and enterprise technologies.
Identify, validate, and safely exploit vulnerabilities and demonstrate how weaknesses can be chained into realistic attack paths.
Scope, design, and execute red-team campaigns and adversary simulations based on relevant threats, emerging techniques, and business risk.
Develop, validate, and incorporate AI-assisted workflows into offensive security activities, such as reconnaissance, campaign development, social engineering, tooling, and analysis.
Develop custom scripts, tooling, payloads, and automation to support offensive security engagements.
Conduct offensive security and red-team assessments with a primary focus on GCP and modern identity platforms, extending testing to AWS, Azure, and Kubernetes as relevant.
Partner with SOC, Detection Engineering, Threat Hunting, and Incident Response teams to plan and execute purple-team exercises that validate telemetry, detections, investigation workflows, and response capabilities.
Partner with engineering and defensive teams to prioritize remediation, retest fixes, and verify improvements to detections, logging, monitoring, playbooks, and defensive controls.
Clearly document findings, attack paths, business impact, and recommended remediation, and communicate results to both technical and executive audiences.
Own the technical direction and execution of the offensive security roadmap in partnership with security leadership. Mature testing methodologies and provide hands-on mentorship and technical pairing to other offensive security practitioners.
Measure program effectiveness through verified remediation, reduced exposure to critical attack paths, and repeatable validation of detection and response coverage.
Required Qualifications
Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent experience.
8+ years of relevant information security experience, including significant hands-on experience in penetration testing, red teaming, adversary…