Max Andreacchi (@atomicchonk) header
Max Andreacchi (@atomicchonk) profile picture

Co-Founder, Head of AI Research @ https://teapawt.net/t.co/DIJL1KPQzU Security researcher exploring AI-driven offensive security 🤖

United States
Joined September 2025
Photo by Max Andreacchi (@atomicchonk)Photo by Max Andreacchi (@atomicchonk)Photo by Max Andreacchi (@atomicchonk)Photo by Max Andreacchi (@atomicchonk)Photo by Max Andreacchi (@atomicchonk)Photo by Max Andreacchi (@atomicchonk)Photo by Max Andreacchi (@atomicchonk)Photo by Max Andreacchi (@atomicchonk)Photo by Max Andreacchi (@atomicchonk)
ZERO-DAY Medium roast. The flagship. Unpatched. Unstoppable. A clean, sweet medium heavy on caramel and chocolate for operators who need flavor before defenses go up. ZERO-DAY doesn't wait for a patch window. It's already in the cup. Tasting notes: caramel, chocolate, low acidity, clean finish. Origin: Brazil. Washed process. Roast: medium. Strength: 3/5. #operatorbrewing #cybercoffee #mediumroast #infosec #coffeeroaster
1
2
13
ACCESS GRANTED. The storefront is online. Three coffees. ZERO-DAY: the flagship. Medium roast. Unpatched. Unstoppable. EXPLOIT: dark roast. The daily driver that cracks open even the most fortified mornings. WIRELESS: Swiss Water® decaf. Caffeine disconnected. Flavor connected. Link in the bio. Deploy accordingly. #operatorbrewing #cybercoffee #redteam #infosec #pentesting
1
25
Max Andreacchi retweeted
You asked, we answered 🎙️ The community has been buzzing with questions about the new HTB COAE! We’ve gathered the most frequent ones to help you decide if you're ready to tackle the future of red teaming. Check out the quick FAQ below to see how you can start your journey into adversarial AI. Find the path and certification on HTB Academy: okt.to/geDrvx #HTB #COAE #AISecurity #RedTeaming #CyberSecurity #LLMs
6
53
4,636
Max Andreacchi retweeted
Bitwarden identified and contained a malicious package briefly distributed through the npm delivery path for the Bitwarden CLI in connection with the broader Checkmarx supply chain incident. No user vault data or production systems were compromised or at-risk. Additional details and updates are available here: community.bitwarden.com/t/bi…
62
632
80
3,392
399,662
Max Andreacchi retweeted
Every week I share a curated list of red team-specific jobs (or similar/adjacent) that caught my attention. My goal is simple: help job hunters in the offensive security space find a red team-specific role. 🏛 Company + Role: Target, Director of Red Team 👀 Quick Insights: Remote (Brooklyn Park, MN), Internal team, People leader, Owns full Red Team program strategy and execution, adversary emulation in production environments, tight integration with CTI and incident response, up to 4x/yr travel to HQ 💰 Comp: $168k-$303k/yr + benefits 🎯 Apply Here: target.wd5.myworkdayjobs.com… ✏️ Notes: Stand out by demonstrating program ownership at scale: strategy, tradecraft maturity, and measurable defensive improvements. Experience leading red team operators and translating offensive findings into executive-level risk narratives == differentiators. CTI integration experience is a strong plus 🏛 Company + Role: Capital One, Purple Team Manager 👀 Quick Insights: Hybrid (McLean, VA; Plano, TX; Richmond, VA), Internal team, People leader, Purple team role bridging offensive and defensive ops, adversary simulation deconstruction, detection gap analysis, big data log analytics 💰 Comp: $179k-$226k/yr + bonus + equity + benefits 🎯 Apply Here: capitalone.wd12.myworkdayjob… ✏️ Notes: Stand out by demonstrating the ability to deconstruct adversary simulations into durable detection improvements. EDR telemetry analysis, big data tooling (Databricks/Spark), and scripting chops are explicitly called out. Offensive security background combined with detection engineering experience is the sweet spot for this role 🏛 Company + Role: Okta, Senior Product Security Engineer, Red Team 👀 Quick Insights: Hybrid (Toronto, ON, Canada), Internal team, Individual contributor, Infrastructure/tooling engineer embedded in red team, NOT an operator role, IaC + C2 infra ownership, OPSEC-focused 💰 Comp: $141k-$193/yr + equity + bonus + benefits 🎯 Apply Here: okta.com/company/careers/sec… ✏️ Notes: Stand out by showcasing Terraform-driven red team infra builds and custom tooling development. C2 deployment experience and OPSEC-aware architecture (redirectors, traffic shaping, domain management) will set you apart. Role skews engineering over ops, so emphasize automation maturity and code quality. 🏛 Company + Role: State Street, Red Team Lead Engineer 👀 Quick Insights: Onsite (Boston, MA), Internal team, Individual contributor, Intel-driven AdSim across enterprise apps, cloud, and critical infra, strong purple team/detection improvement focus 💰 Comp: $120k-$203k/yr + bonus + benefits 🎯 Apply Here: statestreet.wd1.myworkdayjob… ✏️ Notes: Stand out by demonstrating end-to-end red team op ownership with measurable detection/response improvements, plus experience translating technical findings into business risk for executive audiences. Leadership experience mentoring operators and producing high-quality AARs will carry weight here 🏛 Company + Role: TransUnion, Advisor, Red Team 👀 Quick Insights: Hybrid (Chicago, IL; Reston, VA; Crum Lynne, PA; Greenwood Village, CO; Boca Raton, FL), Internal team, Individual contributor, Full-scope threat emulation including red team, purple team, and pentest, hands-on operator 💰 Comp: $113k-$188k/yr + bonus + benefits 🎯 Apply Here: transunion.wd5.myworkdayjobs… ✏️ Notes: Stand out by demonstrating custom tooling development and the ability to write clear, executive-ready reports. OSCP/OSCE a strong plus 🏛 Company + Role: Google, Software Engineer, Adversarial ML, Red Team 👀 Quick Insights: Onsite (New York, NY), Internal team, Individual contributor, Adversarial ML red team role attacking Google's AI/ML deployments, builds red team tooling and infra, collaborates with blue and product teams on defense in depth 💰 Comp: $147k-$211k/yr + equity + bonus + benefits 🎯 Apply Here: google.com/about/careers/app… ✏️ Notes: Stand out by demonstrating hands-on adversarial ML experience: model evasion, data poisoning, prompt injection, or similar attack classes. Ability to build red team tooling and communicate attack impact to both technical + executive audiences will be key. Research background or PhD a strong plus 🏛 Company + Role: DoorDash, Engineering Manager, Red Team 👀 Quick Insights: Remote (US), Internal team, People leader, Full adversary simulation lifecycle ownership, cloud-native offensive ops across a multi-sided marketplace, custom tooling + C2 infra direction, purple team integration 💰 Comp: $194k-$285k/yr + equity + benefits 🎯 Apply Here: job-boards.greenhouse.io/doo… ✏️ Notes: Stand out w/ past experience operating red teams at a marketplace, fintech, or logistics company at scale. 🏛 Company + Role: Microsoft, Principal Software Engineering Manager, Red Team Intelligence 👀 Quick Insights: Remote (US, multiple locations), Internal team, People leader, Leads intelligence analytics sub-team within Microsoft Red Team, NOT an operator role, security graph tooling + data analysis focus, lateral movement path modeling, risk quantification 💰 Comp: $140k-$305k/yr + equity + bonus + benefits 🎯 Apply Here: apply.careers.microsoft.com/… ✏️ Notes: Stand out by combining people leadership experience with security graph or red team intelligence background
1
12
1
27
2,680
Max Andreacchi retweeted
Blogs are up!
Wanting more from today's #BHEU talk on SCOM? Check out this two part blog series! 1️⃣ @unsigned_sh0rt maps SCOM’s roles, accounts, & trust boundaries, then shows how attackers can chain insecure defaults into full management group compromise. ghst.ly/3MBPeAW 🧵: 1/2
1
41
128
18,420
Max Andreacchi retweeted
Stack spoofing isn’t dead. Hear from @klezvirus at #BHEU on how modern detection still breaks, and unveils the first CET-compliant stack spoofing framework. Learn more ➡️ ghst.ly/4izmuou
2
20
45
5,742
Max Andreacchi retweeted
See you all next week...excited to present with @breakfix at #BHEU! 💣
SCOM monitors critical systems, but insecure defaults make it a powerful attack vector. At #BHEU, @unsigned_sh0rt & @breakfix show how to abuse SCOM for credential theft, lateral movement, and domain escalation, plus how to defend it. ghst.ly/4aoggph
3
40
131
19,376
Max Andreacchi retweeted
SCOM monitors critical systems, but insecure defaults make it a powerful attack vector. At #BHEU, @unsigned_sh0rt & @breakfix show how to abuse SCOM for credential theft, lateral movement, and domain escalation, plus how to defend it. ghst.ly/4aoggph
31
1
73
25,680
Max Andreacchi retweeted
Our BloodHound t-shirt fundraiser closes in 2 days! Grab your BloodHound 8.0 t-shirt, available also in kids sizes, today. All proceeds from this fundraiser will support @HopeforHIE. ➡️ ghst.ly/bh8-tshirt
3
6
1,725
Max Andreacchi retweeted
Spoiler alert: Your AI safety measures might have a blind spot. 👀 When attackers use conversation context to bypass LLM safeguards, single-prompt evals just don't cut it anymore. Dive into @AtomicChonk's latest blog on multi-prompt attack detection. ⬇️ ghst.ly/47qJhzn
10
1
26
3,027