Senior Security Researcher - Red Team
New
P
PindropCybersecurity
Ukraine - RemoteContractSenior
Salary125,000 - 165,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 3+ years of hands-on penetration testing and red team experience
- Required Skills
- Python
Requirements
- Have 3+ years of hands-on penetration testing and red team experience across SaaS applications, cloud infrastructure, APIs, and web applications.
- Demonstrate experience attacking GenAI or LLM-based systems, including prompt injection, jailbreaking, indirect prompt attacks, model extraction, or adversarial input generation.
- Have hands-on experience with deepfake tools, voice synthesis, or audio/visual spoofing technologies in an offensive or research context.
- Be proficient with offensive security tools such as Burp Suite, OWASP ZAP, Nmap, Metasploit, or Cobalt Strike, or equivalent frameworks.
- Have experience configuring and operating SAST and DAST tools and integrating them into CI/CD pipelines.
- Be proficient in at least one scripting or programming language; Python is strongly preferred.
- Be familiar with AI-specialized security tools or frameworks such as Garak, PyRIT, or Claude Security, or similar adversarial ML tooling.
- Understand cloud security architecture, container security, API security, and standards including ISO 27001/27002, NIST, CIS, PCI DSS, OWASP, and SOC 2.
- Prior software development or secure architecture experience is a nice-to-have.
- Relevant certifications such as OSCP, GPEN, GWAPT, GXPN, or CEH are a nice-to-have.
Responsibilities
- Design and execute red team operations against GenAI systems, LLM pipelines, RAG architectures, autonomous agents, APIs, SaaS products, and cloud environments.
- Conduct adversarial testing for prompt injection, jailbreaking, model extraction, training-data poisoning, data leakage, inference abuse, and unauthorized output manipulation.
- Use deepfake generation, voice synthesis, and spoofing techniques to test voice authentication and deepfake detection capabilities.
- Develop attack chains combining GenAI vulnerabilities with infrastructure, application, identity, and API weaknesses.
- Plan and execute penetration tests and support bug bounty efforts across web applications, APIs, SaaS products, and AWS/GCP environments.
- Perform architecture reviews, security code reviews, and threat modeling focused on AI/ML components, model integrations, and LLM-facing services.
- Build automation for offensive security workflows, testing, compliance checks, alerting, and reporting using Python or similar scripting languages.
- Partner with SecOps and security engineering to improve detections, tune response workflows, and translate findings into remediation.
View Full Description & ApplyYou'll be redirected to the employer's site
