Remote job
AI Security Expert
Job details
About this role
Role overview
This role focuses on making AI-enabled systems safer without slowing useful work to a halt. You will investigate how AI workflows, agents, permissions, and integrations can fail, then turn those findings into practical controls that teams can actually adopt. The work combines hands-on security testing, technical judgment, and clear communication with people building and operating software.
Responsibilities
- Deliberately test agent workflows and AI-enabled systems to uncover realistic failure modes and exploit paths. - Assess controls around permissions, sandboxing, secrets, approvals, and external tool access. - Use security and code-quality tools to identify vulnerabilities across application code, dependencies, infrastructure, and cloud access. - Distinguish credible risks from demonstrations that do not translate into a meaningful attack path. - Recommend mitigations, help implement fixes, and verify that the changes resolve the underlying problem. - Explain security trade-offs clearly, including when a solution can proceed with appropriate conditions rather than being rejected outright.
Requirements
- Practical experience assessing or securing software, cloud environments, developer tooling, or AI-enabled workflows. - Working knowledge of techniques and tools such as CodeQL, Semgrep, dependency scanning, cloud IAM, or comparable security methods. - Ability to reason about AI-specific risks, including agent boundaries, tool permissions, data exposure, and approval loops. - A hands-on approach: comfortable using the systems and tools being evaluated, not only writing policy about them. - Strong judgment about severity, exploitability, and the difference between theoretical concern and actionable risk. - Clear written and verbal communication, with the ability to make recommendations useful to engineers and operators.
Benefits and work setup
- Remote role with working hours aligned to the United States. - The engagement may begin with paid contractor work on a real project, with the possibility of expanding the relationship when the fit is strong.