{"id":3220123,"url":"https://alion.io/job/whyhirewrong-security-engineer","title":"Security Engineer","company":{"id":7360,"name":"WhyHireWrong","domain":"whyhirewrong.com","url":"https://alion.io/company/whyhirewrong","size_band":"201-500","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0.25,"stale_share":0.25,"repost_share":0.25,"time_to_fill_p50_days":29,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":61000,"max_usd":110000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":29},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Fine-tuning","optional":false},{"name":"LLM","optional":false},{"name":"Red Teaming","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Function Calling","optional":true},{"name":"ISO 27001","optional":true},{"name":"Multi-Agent Systems","optional":true},{"name":"OWASP","optional":true},{"name":"RAG","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-24T23:20:47Z","employer_posted_date":"2026-10-24","last_verified_at":"2026-10-26T08:53:04Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"You will identify realistic attack paths, build automated testing and attack tooling, work directly with engineering teams to remediate findings, and help strengthen security across authentication, access control, integrations, CI/CD, and incident readiness.\nWhat You Will Do\nDesign and execute red team exercises against LLM-based features, including prompt injection, indirect prompt injection through emails and documents, tool-use abuse, data exfiltration, and multi-step attack chains.\n\nBuild, configure, fine-tune, and operate open-source models to develop automated security testing and adversarial tooling.\n\nReview application code, identify security vulnerabilities, and implement fixes in collaboration with software engineers.\n\nOwn and improve security controls for authentication, authorization, permissions, third-party integrations, and customer data protection.\n\nStrengthen organizational security, including identity and access management, endpoint and device security, CI/CD security, and incident response readiness.\n\nConduct threat modeling and risk assessments for new features, integrations, and AI-driven workflows.\n\nSupport customer security reviews, questionnaires, audits, and technical discussions related to product and data security.\n\nTrack emerging AI security threats, attack techniques, and defensive practices, translating them into practical controls and testing scenarios.\n\nDocument findings clearly, prioritize remediation based on risk, and verify that fixes are effective.\n\nRequirements:\n5+ years of experience in offensive security, application security, security engineering, or a closely related field.\n\nDemonstrated experience attacking or assessing LLM-based systems, such as prompt injection research, AI red teaming, security tooling, published write-ups, CVEs, bug bounty findings, or internal attack-chain work.\n\nStrong software engineering skills, including the ability to understand unfamiliar codebases, identify vulnerabilities, and ship secure fixes.\n\nHands-on experience with open-source LLMs, including running, fine-tuning, or building agents and evaluation tooling.\n\nSolid understanding of web and API security fundamentals, including authentication, authorization, injection vulnerabilities, session management, and access control.\n\nPractical experience securing cloud-based systems, developer workflows, CI/CD pipelines, and internal infrastructure.\n\nAbility to work across product security and organizational security, not only within a single application.\n\nStrong analytical skills, intellectual honesty, and a collaborative, low-ego working style.\n\nFluent English, both written and spoken.\n\nNice to Have\nPublic security research, conference talks, CVEs, bug bounty achievements, or open-source security tools.\n\nExperience with agent frameworks, retrieval-augmented generation, tool calling, or multi-agent systems.\n\nExperience supporting customers in regulated or security-sensitive industries.\n\nFamiliarity with security frameworks and standards such as OWASP, NIST, ISO 27001, or SOC 2.\n\nExperience with purple teaming, detection engineering, or incident response.\n\nOffer\nA senior role with direct influence over AI security strategy, engineering practices, and organizational security.\n\nThe opportunity to work on challenging problems at the intersection of applied AI, offensive security, and product engineering.\n\nA collaborative environment where security findings lead to real engineering improvements.","description_format":"text","description_chars":3469,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-25T02:38:43Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.542,"p_room":1,"age_days":1,"expected_fill_days":29,"reasons":["conf:7","agency","velocity","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/whyhirewrong-security-engineer","json_url":"https://alion.io/job/whyhirewrong-security-engineer.json","meta":{"generated_at":"2026-10-26T15:51:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21109,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7360},"rest":"https://alion.io/mcp/rest/get_company?id=7360"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwhyhirewrong-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwhyhirewrong-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwhyhirewrong-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/whyhirewrong-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwhyhirewrong-security-engineer"}]}