ElasticElastic logo - GenAI Security - Principal Security Research Engineer
Requirements
• Proven ability to seamlessly transition between different projects, codebases, or scrum teams based on dynamic business priorities. • You work autonomously and can drive decisions and results in a distributed team by leveraging asynchronous, direct, and transparent communication. • Previous successes in presenting findings and insights to technical audiences. • Experience with Elastic Security Solution and proficiency in writing or validating detections using a query language (e.g. EQL, KQL, ESQL) is a bonus. • Experience running penetration tests or vulnerability assessments on web applications, or APIs. Experience as a Red Team operator is also valuable. You should understand the OWASP Top 10 and have some exposure to the OWASP LLM Top 10 or MITRE ATLAS. Additionally, you need to be able to triage findings. You should communicate risks clearly to both technical and non-technical audiences. • Additional Information - We Take Care of Our People: • As a distributed company, diversity drives our identity. Whether you’re looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn’t matter if you’re just out of college or your children are; we need you for what you can do. • We strive to have parity of benefits across regions, and while regulations differ from place to place, we believe taking care of our people is the right thing to do. • Competitive pay based on the work you do here and not your previous salary • Health coverage for you and your family in many locations • Ability to craft your calendar with flexible locations and schedules for many roles • Generous number of vacation days each year • Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service • Up to 40 hours each year to use toward volunteer projects you love • Embracing parenthood with a minimum of 16 weeks of parental leave
Responsibilities
• Design and carry out security tests for GenAI applications, agentic systems, and LLM-backed products. These tests will check for various attack types. They include prompt injection, indirect injection, retrieval poisoning, tool misuse, sensitive data extraction, and unsafe delegation to with the core purpose of building security protections. • Investigate new multi-domain threat vectors and attack methodologies to stay ahead of emerging risks and translating these into new security protections (e.g. detection rules). • Create and present findings to enhance team knowledge and community awareness.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT