{"id":1912134,"url":"https://alion.io/job/state-street-offensive-ai-engineer-frontier-ai-security-testing-vp","title":"Offensive AI Engineer – Frontier AI Security & Testing, VP","company":{"id":1806,"name":"State Street","domain":"statestreet.com","url":"https://alion.io/company/state-street","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":97,"open_postings":340,"ghost_share":0.015,"stale_share":0.247,"repost_share":0.047,"time_to_fill_p50_days":21,"computed_at":"2026-10-19T05:45:15Z"}},"role":"AI/ML","role_family":"AI/ML","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Quincy, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":202500,"currency":"USD","period":"year","gross":null,"usd_annual":202500},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon SageMaker","optional":false},{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"AWS Lambda","optional":false},{"name":"AWS Strands Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Context Engineering","optional":false},{"name":"CrewAI","optional":false},{"name":"Databricks","optional":false},{"name":"Delta Lake","optional":false},{"name":"Function Calling","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"IAM","optional":false},{"name":"LangChain","optional":false},{"name":"LangGraph","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Evaluation","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Multi-Agent Systems","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Pydantic","optional":false},{"name":"pySpark","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Rest API","optional":false},{"name":"SQL","optional":false},{"name":"Terraform","optional":false},{"name":"Tool Use","optional":false},{"name":"Kubernetes","optional":true},{"name":"Machine Learning","optional":true},{"name":"Spark","optional":true}],"status":"live","first_seen_at":"2026-10-05T15:03:10Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-20T03:08:30Z","board_verified":true,"closed_at":null,"days_open":14,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":14},"description":"Offensive AI Engineer - Frontier AI Security & Testing\nWho we are looking for\nState Street Global Cybersecurity (GCS) is looking for a hands-on Offensive AI Engineer to join Frontier AI Security & Testing (FAST). FAST is a new research and development team within Regulatory Assurance, Penetration Testing & Offensive Research. This role works at the intersection of frontier AI, cloud engineering, data engineering and offensive security. You will design, deploy and run the secure AWS-based platforms, evaluation harnesses and data pipelines that let State Street use frontier AI models safely as an offensive security capability.\nThis is an engineering role, not an advisory or architecture-only one. You will build, configure, deploy, troubleshoot and automate. You will work directly with frontier models, agentic frameworks and enterprise APIs. The work also includes putting technical controls in place so that AI is used in an auditable, governed way in a highly regulated financial services environment.\nWhy this role is important to us\nState Street is expanding its use of frontier AI across cybersecurity to strengthen resilience, speed up adversary emulation and improve how defenses are validated. FAST decides which models can be trusted, shows with evidence what they can do, builds the platform they run on, and turns model capability into tools that red team, penetration testing, purple team and threat hunt teams can use. As an Offensive AI Engineer, you will help build the execution, evaluation and control layer that lets these capabilities run safely at enterprise scale.\nWhat you will be responsible for\nAs an Offensive AI Engineer you will:\nAWS AI infrastructure and deployment\nDesign, engineer and deploy secure, isolated AWS environments to host and access frontier AI models. This includes Amazon Bedrock, SageMaker, private endpoint connectivity (PrivateLink/VPC endpoints), EKS/ECS, Lambda and API Gateway.\nBuild and maintain infrastructure-as-code (Terraform or CloudFormation) and CI/CD pipelines for AI workloads, with repeatable and auditable deployment patterns.\nEngineer network segmentation, identity and access controls, secrets management and egress restrictions that create enforceable trust boundaries around agentic AI activity.\nFrontier model engineering and evaluation\nIntegrate with frontier model provider APIs and SDKs from major commercial vendors. Build model-agnostic abstraction layers that allow fast model onboarding and side-by-side comparison.\nDesign and build standardized evaluation harnesses and benchmarking frameworks. These should measure model capability, precision, false-positive rate, reliability, cost and failure modes across offensive security tasks in a repeatable way.\nDevelop agentic workflows, tool-use integrations and multi-agent orchestration patterns (e.g., MCP, LangGraph, Strands, or similar) that support reconnaissance, attack-path analysis and adversary simulation in controlled lab environments.\nStress-test models against known AI failure modes, including prompt injection, jailbreak susceptibility, data leakage, tool misuse, scope drift and unsafe emergent behavior.\nData science and Databricks\nDesign and build Databricks pipelines (PySpark/SQL) to ingest, curate and analyze model telemetry, evaluation results and offensive security data sets.\nApply data science methods to evaluation results, including statistical comparison, scoring methodology, trend analysis and regression detection across model versions.\nBuild data products and dashboards that give leadership evidence of model performance, cost and risk.\nAPI integration\nBuild secure, scalable integrations between AI platforms and enterprise systems, security tools and data sources using REST APIs, event-driven architectures and tool-execution brokers.\nDevelop reusable API patterns and connectors for tool invocation, context injection and output validation.\nAI controls, logging and governance\nImplement technical controls that limit agent autonomy where needed. These include guardrails, human-in-the-loop checkpoints, rate and scope limits, kill-switch mechanisms and least-privilege tool access.\nEngineer full logging, monitoring and observability that capture agent inputs, outputs, tool calls and decision paths to support auditability and post-incident analysis.\nAlign AI use with enterprise Responsible AI, model risk management, legal and compliance requirements. Produce technical evidence suitable for audit and regulatory review.\nDocument architectures, control implementations and evaluation methods to a standard that holds up under internal and external scrutiny.\nWhat we value\nThese skills will help you succeed in this role:\nA builder's mindset: you are comfortable taking an idea from prototype to a hardened, production-grade capability.\nDeep hands-on experience deploying AI-enabled applications on AWS, particularly Amazon Bedrock, SageMaker, Lambda, API Gateway, EKS/ECS, IAM, KMS and VPC networking.\nDirect experience working with frontier LLMs through vendor APIs, including prompt and context engineering, tool use and function calling, agentic workflows and model evaluation.\nStrong Python skills, plus experience with GenAI and agentic frameworks (LangChain, LangGraph, Strands, CrewAI, Pydantic, MCP, or similar).\nHands-on Databricks experience (PySpark, SQL, Delta Lake, workflows) and a working grounding in data science and statistical analysis.\nExperience designing and consuming REST APIs and event-driven integrations.\nA working understanding of AI security risks and controls, such as the OWASP Top 10 for LLM Applications, MITRE ATLAS and the NIST AI RMF.\nFamiliarity with offensive security concepts, adversary tactics and frameworks such as MITRE ATT&CK (strongly preferred).\nStrong critical thinking and problem-solving skills, and the ability to explain complex technical results clearly to engineers, leadership and risk partners.\nThe ability to research, learn and apply new models, tools and techniques quickly as the frontier AI landscape changes.\nEducation & Preferred Qualifications\nBachelor's degree in Computer Science, Engineering, Data Science, Information Systems, Artificial Intelligence, or equivalent practical experience.\n5+ years of hands-on experience in software, cloud, data or security engineering.\n2+ years of hands-on experience building and deploying GenAI, LLM or agentic AI solutions on cloud platforms, preferably AWS.\nExperience with infrastructure-as-code (Terraform preferred) and CI/CD tooling.\nAWS certifications (e.g., Solutions Architect, Machine Learning Specialty, Security Specialty) and/or Databricks certifications are a plus.\nOffensive security certifications (e.g., OSCP, OSEP, GPEN) or penetration testing experience are a plus.\nExperience in financial services or another highly regulated industry is preferred.\nSalary Range:\n$120,000 - $202,500 AnnualThe range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.\nEmployees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.\nFor a full overview, visit https://hrportal.ehr.com/statestreet/Home.\nAbout State Street\nAcross the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.\nWe are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.\nAs an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.\nDiscover more information on jobs at StateStreet.com/careers\nRead our CEO Statement\nJob Application Disclosure:\nIt is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.","description_format":"text","description_chars":9234,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Flexible schedule","Insurance coverage","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Asset Management & Funds","Custody & Fund Administration"],"lifecycle":[{"event":"open","at":"2026-10-05T15:03:10Z"}],"visa":[],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.859,"p_room":0.9,"age_days":13,"expected_fill_days":21,"reasons":["conf:2","velocity","win:mid","comp:brand"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":202500,"is_top_pay":false},"html_url":"https://alion.io/job/state-street-offensive-ai-engineer-frontier-ai-security-testing-vp","json_url":"https://alion.io/job/state-street-offensive-ai-engineer-frontier-ai-security-testing-vp.json","meta":{"generated_at":"2026-10-20T04:08:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4577,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1806},"rest":"https://alion.io/mcp/rest/get_company?id=1806"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstate-street-offensive-ai-engineer-frontier-ai-security-testing-vp"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstate-street-offensive-ai-engineer-frontier-ai-security-testing-vp"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstate-street-offensive-ai-engineer-frontier-ai-security-testing-vp"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/state-street-offensive-ai-engineer-frontier-ai-security-testing-vp\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstate-street-offensive-ai-engineer-frontier-ai-security-testing-vp"}]}