AI Security Engineer (Offensive) – Remote

About the role

Our client seeks a highly hands‑on security engineer to continuously attack, test, and strengthen their AI product and infrastructure. You will think like a white‑hat hacker, identify vulnerabilities across agents, APIs, identity, memory, permissions, data flows, and infrastructure, and work directly with engineering to prioritize and fix findings.

Key responsibilities

• Continuously red‑team the product, infrastructure, APIs, and agentic systems.
• Identify, reproduce, and remediate vulnerabilities in partnership with engineers.
• Test AI‑specific attack surfaces such as prompt injection, tool misuse, data leakage, permission escalation, memory poisoning, and unsafe agent behavior.
• Use agents, automation, and security tooling to probe systems and surface weaknesses.
• Triage findings based on exploitability, user impact, and business risk.
• Strengthen authentication, authorization, identity, secrets management, data boundaries, and infrastructure security.
• Build lightweight monitoring, testing, and defensive systems that evolve with the product.
• Help establish pragmatic security standards and development practices without adding unnecessary process.

Required profile

• Strong experience in application, product, cloud, or offensive security.
• Hands‑on ability to identify, exploit, debug, and remediate vulnerabilities.
• Solid understanding of modern web architecture, APIs, authentication/authorization, cloud infrastructure, and data security.
• Strong engineering fundamentals and coding ability to build security tooling, automation, and fixes.
• Familiarity with AI/LLM security risks and interest in securing agentic systems.
• Comfortable operating in a fast‑moving, zero‑to‑one environment where the security model evolves alongside the product.
• Pragmatic judgment: knows established security best practices, applies them well, and knows when deeper investigation is warranted.
• Located in Latin America and fluent in English.

Required skills

• Application security
• Cloud security
• Offensive security (red‑team)
• API security
• Authentication/authorization
• Automation
• Security tooling development
• AI/LLM security

What we offer

• 100% remote work – work from any location with a laptop and reliable internet.
• Highly competitive USD compensation, market‑leading pay.
• Paid time off to support well‑being.
• Autonomy to manage your time and focus on results.
• Opportunities to work with top American companies on high‑impact projects.