Senior AI Security Engineer - LLM Vulnerability

We are looking for AI Security Engineers with expertise in application security, product security, and GenAI/LLM security to identify and evaluate vulnerabilities in AI-powered applications, particularly Sensitive Information Disclosure (SID) and Excessive Agency (EA).

Responsibilities:

• Build and test vulnerable and secure AI agent/RAG codebases.
• Identify LLM vulnerabilities across tool calling, agent memory, and MCP.
• Perform secure code reviews, source-to-sink analysis, and taint analysis.
• Evaluate SAST tools and validate findings through deterministic tests.
• Analyze authorization, access controls, data flows, and security boundaries.
• Recommend security fixes and remediation strategies.

Requirements:

• Experience in Application Security, Product Security, or Security Engineering.
• Strong programming skills in Python and/or TypeScript.
• Hands-on experience with LLM agents and RAG applications.
• Familiarity with LangChain, LlamaIndex, OpenAI/Anthropic SDKs, or MCP.
• Experience with CodeQL, Semgrep, SAST, and secure code review.
• Knowledge of OAuth, IAM, authorization, multi-tenancy, and access controls.
• Understanding of Sensitive Information Disclosure and Excessive Agency Vulnerabilities.

Good to Have:

• OWASP Top 10 for LLM Applications.
• MCP security and AI agent threat modeling.
• Prompt injection and RAG security.
• AI security evaluation experience.

Skills

AI Agents, AppSec, Application Security, CodeQL, LLM, LangChain, LlamaIndex, MCP, OWASP, Product Security, Python, RAG, SAST, Secure Code Review, Securities Research, Security Engineer, Semgrep, Threat Modeling, TypeScript