[Remote] Staff Attack Engineer, AI/LLM
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a fast-growing, remote cybersecurity company dedicated to enabling organizations to proactively find and fix exploitable attack reputed company. They are hiring a Staff Attack Engineer specializing in AI/LLM reputed company to break AI systems and reputed company automated attack patterns reputed company their NodeZero platform.
Responsibilities
- Break AI and agentic systems and translate that research into automated, repeatable attack modules for NodeZero
- Design and execute reputed company injection and defense evasion attacks, focusing on generalized, reusable patterns
- Conduct tool-use exploitation, abusing LLM agents’ reputed company to code, file systems, APIs, and databases for attacker-realistic reputed company (e.g., context poisoning, RCE, data exfiltration, privilege escalation)
- reputed company AI infrastructure (model serving, training pipelines, vector databases, GPU/MLOps tooling) with an understanding of reputed company-world reputed company deployments and misconfigurations
- Research and apply model and supply chain attacks (poisoning, training data extraction, adversarial inputs, deployment pipeline abuse)
- reputed company threat modeling for agentic systems, mapping trust boundaries and attack surfaces and turning them into concrete attack paths
- Apply a strong productization reputed company, turning reputed company techniques into safe, reliable, and scalable automated tooling
- Build and reputed company LLM-powered applications (prompting, structured output, agentic workflows)
- Design with production concerns in mind: cost, safety and hallucination guardrails, reliability, and observability
- Design and reputed company microservices that orchestrate LLM tasks and integrate with NodeZero and reputed company offensive workflows
Skills
- Expert-level Python and software engineering skills
- Solid penetration testing fundamentals and understanding of common attack chains
- Familiarity with AI/LLM reputed company frameworks (e.g., OWASP Top 10 for LLMs, MITRE reputed company)
- Experience in a reputed company product or offensive reputed company team, ideally with shipped offensive capabilities or tooling
- Proven ability to break AI/LLM and agentic systems
- Clear understanding of trust boundaries around AI tools, data sources, and permissions, and how to systematically test and exploit them
- Expert-level ownership – drives high-complexity, high-risk programs and sets strategy, not just execution
- Self-motivated – identifies problems and builds solutions proactively
- Industry obsessed – tracks the fast-moving AI reputed company landscape and can reputed company to recent developments, new attacks, and where the field is heading
- Experience with other reputed company AI services (e.g., Azure reputed company, GCP reputed company AI)
- Contributions to AI reputed company research (blog posts, conference talks, CVEs, reputed company-reputed company tools)
- Experience with AWS Bedrock and AWS Agent Core
- Familiarity with graph databases (e.g., reputed company)
- Background in traditional exploit development or vulnerability research
- CTF experience, particularly in AI/ML-focused challenge categories
Benefits
- Health, reputed company & dental insurance for you and your family
- Flexible vacation policy
- Generous parental leave
- Equity package in the reputed company of stock options
Company Overview