Staff Attack Engineer, AI/LLM

The role

You will break AI and agentic systems and turn that research into automated attacks inside the NodeZero platform. You will also build LLM-powered applications and design microservices to orchestrate LLM tasks.

What you will do

• Break AI and agentic systems and translate research into automated attack modules for NodeZero
• Design and execute prompt injection and defense evasion attacks
• Conduct tool-use exploitation involving LLM agents access to code, file systems, APIs, and databases
• Target AI infrastructure including model serving, training pipelines, vector databases, and GPU/MLOps tooling
• Research and apply model and supply chain attacks
• Perform threat modeling for agentic systems
• Apply a productization mindset to turn manual techniques into automated tooling
• Build and extend LLM-powered applications
• Design with production concerns like cost, safety, reliability, and observability
• Design and extend microservices that orchestrate LLM tasks

Required qualifications

• Expert-level Python and software engineering skills
• Solid penetration testing fundamentals and understanding of common attack chains
• Familiarity with AI/LLM security frameworks (e.g., OWASP Top 10 for LLMs, MITRE ATLAS)
• Experience in a security product or offensive security team
• Proven ability to break AI/LLM and agentic systems
• Clear understanding of trust boundaries around AI tools, data sources, and permissions
• Expert-level ownership
• Self-motivated

Nice to have

• Experience with other cloud AI services (e.g., Azure OpenAI, GCP Vertex AI)
• Contributions to AI security research (blog posts, conference talks, CVEs, open-source tools)
• Experience with AWS Bedrock and AWS Agent Core
• Familiarity with graph databases (e.g., Neo4j)
• Background in traditional exploit development or vulnerability research
• CTF experience, particularly in AI/ML-focused challenge categories

Benefits

• Equity package in the form of stock options
• Health, vision & dental insurance for you and your family
• Flexible vacation policy
• Generous parental leave

About the company

Horizon3 is a remote cybersecurity company dedicated to enabling organizations to proactively find and fix exploitable attack vectors. Their flagship product, NodeZero, delivers autonomous pentests across various environments.