Staff Attack Engineer (AI/LLM)

• We are hiring a Staff Attack Engineer specializing in AI/LLM security to join our team. You will break AI and agentic systems and turn that research into automated attacks inside NodeZero, our autonomous pentesting platform
• This is not consulting or manual pentesting; the goal is to build repeatable, scalable attack patterns that run autonomously across customer environments. You’ll also help drive our LLM-powered offensive capabilities and act as a technical leader for AI/LLM offense
• Break AI and agentic systems and translate that research into automated, repeatable attack modules for NodeZero
• Design and execute prompt injection and defense evasion attacks, focusing on generalized, reusable patterns
• Conduct tool-use exploitation, abusing LLM agents’ access to code, file systems, APIs, and databases for attacker-realistic outcomes (e.g., context poisoning, RCE, data exfiltration, privilege escalation)
• Target AI infrastructure (model serving, training pipelines, vector databases, GPU/MLOps tooling) with an understanding of real-world enterprise deployments and misconfigurations
• Research and apply model and supply chain attacks (poisoning, training data extraction, adversarial inputs, deployment pipeline abuse)
• Perform threat modeling for agentic systems, mapping trust boundaries and attack surfaces and turning them into concrete attack paths
• Apply a strong productization mindset, turning manual techniques into safe, reliable, and scalable automated tooling
• Build and extend LLM-powered applications (prompting, structured output, agentic workflows)
• Design with production concerns in mind: cost, safety and hallucination guardrails, reliability, and observability
• Design and extend microservices that orchestrate LLM tasks and integrate with NodeZero and related offensive workflows
• Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice

Benefits

• Growth Opportunities: Be part of a dynamic and growing team with numerous career advancement opportunities
• Innovation-Driven Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking
• Flexible Work Environment: Enjoy the convenience and work-life balance that comes with remote work
• Inclusive and Diverse Team: We value diversity and promote an inclusive culture where everyone can thrive

• Expert-level ownership – drives high-complexity, high-risk programs and sets strategy, not just execution
• Proven ability to break AI/LLM and agentic systems
• Familiarity with AI/LLM security frameworks (e.g., OWASP Top 10 for LLMs, MITRE ATLAS)
• Clear understanding of trust boundaries around AI tools, data sources, and permissions, and how to systematically test and exploit them
• Self-motivated – identifies problems and builds solutions proactively
• Expert-level Python and software engineering skills
• Industry obsessed – tracks the fast-moving AI security landscape and can speak to recent developments, new attacks, and where the field is heading
• Solid penetration testing fundamentals and understanding of common attack chains
• Experience in a security product or offensive security team, ideally with shipped offensive capabilities or tooling
• We welcome candidates from all backgrounds and experiences, and we encourage all qualified individuals to apply
• Background in traditional exploit development or vulnerability research
• Familiarity with graph databases (e.g., Neo4j)
• Experience with other cloud AI services (e.g., Azure OpenAI, GCP Vertex AI)
• CTF experience, particularly in AI/ML-focused challenge categories
• Experience with AWS Bedrock and AWS Agent Core
• Contributions to AI security research (blog posts, conference talks, CVEs, open-source tools)