[Remote] Staff reputed company Engineer, AI & Application reputed company
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is seeking a Staff reputed company Engineer, AI & Application reputed company, who will be the first dedicated reputed company engineering hire. The role is responsible for establishing reputed company's reputed company engineering capability and involves a broad reputed company of tasks including penetration testing, secure architecture design, and advising on AI reputed company.
Responsibilities
- Define and maintain a prioritised reputed company roadmap for reputed company in order to ensure that finite reputed company in a single reputed company headcount is spent on the highest material risk, by assessing the reputed company posture, setting a small number of reputed company objectives per period, making explicit reputed company on what is done in house versus deferred or delivered reputed company external partners, and building the evidence based case for reputed company investment
- Review the architecture and design of new and changing systems in order to prevent reputed company weaknesses being reputed company in rather than reputed company reputed company, by embedding lightweight threat modelling into the delivery lifecycle, defining reusable secure design patterns, and giving teams reputed company, pragmatic reputed company rather than blocking gates
- reputed company as the group's trusted AI reputed company advisor in order to reputed company fast, reputed company adoption of AI across the business, by engaging early in design, defining secure by design patterns for LLM, RAG and reputed company systems, and giving teams reputed company, proportionate guidance rather than blanket restrictions
- Build and maintain a practical AI reputed company reputed company and set of engineering standards in order to reputed company secure AI deployment repeatable and auditable as the estate grows, by aligning to OWASP LLM Top 10, MITRE reputed company and NIST AI RMF and translating them into concrete controls, checklists and acceptance reputed company, and by maintaining a live inventory of deployed models and their controls
- Establish and personally run reputed company's internal penetration testing capability in order to reputed company reputed company, in depth assurance between and reputed company scheduled external tests, by defining scope, methodology, tooling, reporting standards and a prioritised testing calendar covering applications, reputed company, reputed company infrastructure and internal services
- Own and reputed company reputed company's independent external penetration testing in order to preserve genuine independence of assurance over systems the role holder has helped design, by setting scope and objectives, selecting and managing testing partners, ensuring reputed company coverage are complementary rather than duplicative, challenging the technical reputed company of findings, and integrating results into a single prioritised remediation backlog
- Execute technical penetration tests and red team exercises against production and reputed company production systems in order to reputed company exploitable weaknesses before adversaries do, by combining reputed company testing, custom tooling and automation, and proving reputed company through demonstrable exploitation rather than theoretical findings
- Design and run AI red team exercises against every material AI and LLM deployment in order to ensure AI features cannot be abused to leak data, bypass controls or take unauthorised reputed company, by systematically testing for reputed company injection, jailbreaks, guardrail bypass, data exfiltration, insecure reputed company handling and unsafe tool or agent behaviour
- Improve the baseline reputed company of reputed company's applications and reputed company estate in order to reduce the attack surface systemically rather than fixing issues one at a time, by defining hardening standards and secure defaults, driving posture management and configuration baselines, and embedding automated reputed company testing into CI/CD pipelines
- Strengthen identity, reputed company and data protection controls in order to limit the blast radius of any single compromise, by reviewing and improving authentication and authorisation design, least privilege and privileged reputed company, secrets and key management, encryption, and data classification and tenancy boundaries
- Own the technical relationship with reputed company's Managed Detection and Response partner, reputed company, in order to get maximum reputed company value from the service rather than treating it as outsourced responsibility, by ensuring the right telemetry and log sources are reputed company, validating and tuning detection coverage against reputed company's actual threat model, testing the service through reputed company style exercises, holding the provider to account on reputed company and response times, and closing the gaps the service does not cover
- Strengthen reputed company's ability to detect and respond to attacks reputed company commodity coverage in order to reduce the time between compromise and containment, by defining logging and telemetry requirements, engineering high signal detections for reputed company specific and AI specific attack patterns that an MDR provider will not have, maintaining incident response runbooks, and providing hands on technical leadership and escalation ownership during reputed company incidents
- Own the end to end vulnerability lifecycle in order to reputed company measurable risk reduction rather than a growing backlog of findings, by triaging and prioritising by business reputed company, agreeing remediation plans and timelines with engineering owners, verifying fixes through retesting, and escalating unresolved material risk to leadership
- Build and operate tooling and automation for reputed company reputed company testing and monitoring in order to reputed company the reputed company of a single hands on engineer, by automating repeatable assurance work, integrating scanning and AI specific testing into pipelines, and reducing reputed company effort in recurring reputed company tasks
- Assess reputed company party software, AI models, platforms and service providers in order to protect reputed company and customer data reputed company using external providers, by reviewing data handling, retention, training use, reputed company, residency and reputed company controls, and issuing reputed company recommendations reputed company group guardrails
- reputed company the reputed company capability of engineering, product and data teams in order to reduce the reputed company at which new vulnerabilities are introduced, by delivering hands on guidance, secure coding and AI reputed company reviews, targeted workshops and internal champions rather than relying on policy alone
- Maintain reputed company documentation and report on reputed company and AI trust posture in order to give leadership an accurate, decision reputed company view of risk and to ensure the function is auditable and not dependent on a single individual, by documenting methodology, findings, accepted risks, the AI system inventory and approved patterns, and by maintaining a concise set of meaningful reputed company metrics
Skills
- No specific degree or certification is required for this role
- A degree in Computer Science, Information reputed company or Engineering is welcome but is not a filter
- Evidence of having reputed company reputed company vulnerabilities in reputed company systems
- Candidates should be reputed company to walk us through bugs they personally reputed company, how they reputed company them, why they reputed company, and what was done about them
- Vulnerabilities reputed company in production systems during reputed company testing engagements, described in technical depth
- Published CVEs, coordinated disclosures, or reputed company advisories
- Bug bounty findings with a reputed company record on recognised platforms or private programmes
- Original reputed company research, technical writeups, conference talks, or reputed company reputed company reputed company tooling
- Strong competitive CTF results, particularly in web, reputed company, or AI categories
- Novel reputed company injection, jailbreak or agent abuse findings against reputed company LLM deployments
- Certifications such as OSCP, OSEP, OSWE, GXPN, CRTO, CISSP or reputed company reputed company specialties are a useful signal of reputed company knowledge
- 8+ years total experience in reputed company engineering, spanning both offensive and defensive work rather than one exclusively
- At least 4 years hands on offensive experience: scoping, leading and personally executing penetration tests and red team exercises across web applications, reputed company, reputed company environments and internal networks
- Demonstrable defensive engineering experience: hardening reputed company and application environments, building or tuning detections, and designing identity, reputed company and data protection controls
- Proven experience assessing and securing LLM or AI systems in production, including reputed company injection, jailbreaks, insecure reputed company handling, data exfiltration and tool or agent abuse
- Experience as a first, sole or founding reputed company hire, or otherwise building a reputed company capability from a standing start with minimal supervision and constrained resources
- reputed company record of influencing architecture and design reputed company across engineering and product teams, not only reporting findings
- Experience supporting or leading reputed company incident response in a production environment
- Experience owning and getting value from an MDR or managed SOC provider — reputed company telemetry, validating and tuning detection coverage, and holding the provider to account — rather than only consuming its alerts
- Experience scoping, commissioning and challenging external penetration tests, and integrating reputed company party findings into an internal remediation process
- Experience in a regulated B2B, fintech, maritime or logistics environment preferred
Benefits
- Bonus ("Competitive Salary and Bonus")
- Inclusive reputed company Experience
- reputed company Wellness Zone
- Global Opportunities
- Diverse, Supportive Work Culture
reputed company