armadin - Senior Red Team Operator, AI/LLM

Remote - USA+ Equity2w ago

Remote Senior NA Artificial Intelligence Logistics Senior Community Manager Legal Counsel Reporting MLOps Vector Linux Bash Python Risk Management Wagmi

Requirements

• Deep, hands-on AI offense. LLM and agent exploitation beyond the OWASP Top 10 for LLM Applications, including direct and indirect prompt injection, jailbreak chains, system prompt extraction, and data exfiltration through model outputs. • Depth in at least one more AI attack surface: • Agentic systems: tool and function-call abuse, MCP and plugin exploitation, memory poisoning, and multi-agent trust boundaries. • RAG and data pipelines: vector store and embedding attacks, retrieval poisoning, and cross-tenant data leakage. • Adversarial ML: evasion, model extraction, membership inference, and training or fine-tuning data poisoning. • AI supply chain and infrastructure: malicious model artifacts, unsafe serialization, model registries, and inference and MLOps platforms. • Application security fundamentals. Most AI attacks land through the app around the model. You bring strong web and API exploitation skills, including authentication and authorization bypass and injection chains. • An attacker's toolkit and the instinct to go beyond it. Fluency with tools like Burp Suite, Caido, Garak, PyRIT, promptfoo, and the Adversarial Robustness Toolbox, plus the judgment to know when the tool is wrong. • Systems understanding that makes chaining possible. Strong grasp of how LLMs, agent frameworks, and model-serving stacks work under the hood, and how one weakness leads to the next. • Comfort everywhere you land. Proficiency across Linux, Windows, and macOS and major cloud AI platforms, with scripting in Python, Bash, or similar. • An AI-forward way of working. You already use AI tools to speed up recon, analysis, or tooling, and you're excited to push them much further. • Sharp human-in-the-loop judgment. You absorb new information quickly, make time-sensitive calls under pressure, and can explain your reasoning to safety and engineering teams. • A builder's, startup mindset. You're scrappy, self-directed, and comfortable with ambiguity, and you'd rather ship something useful than wait for a process. • Clear communication with clients. You can translate a complex AI attack chain for engineers, executives, and legal counsel during engagements and remediation debriefs. • Logistics. Must be eligible to work in the United States without sponsorship. Ability to travel up to 20% for on-site engagements or client meetings. • You've built AI systems, not just broken them. Hands-on work with LLM fine-tuning, agentic frameworks like LangChain or AutoGen, or ML pipelines gives you an insider's view of where they fail. • You've shipped offensive AI tooling. Prompt injection harnesses, jailbreak fuzzers, Burp or Caido extensions for LLM traffic, or open-source AI red team projects others actually use. • You hunt in public. AI bug bounty findings, CVEs in AI frameworks or model-serving platforms, AI CTF wins, or conference talks at venues like DEF CON's AI Village. • You keep sharpening. Active time on AI security challenges like Gandalf, Crucible, HackAPrompt, or PortSwigger's LLM attack labs. • You know the frameworks. Working familiarity with MITRE ATLAS, the OWASP Top 10 for LLM Applications, and the NIST AI Risk Management Framework. • Relevant certifications, such as OSWE, OSAI, Burp Suite Certified Practitioner, GWAPT, or emerging AI security credentials. • Remote in United States

Responsibilities

• Run full kill chains, not checklists. Attack LLMs, agents, RAG pipelines, and the applications wrapped around them the way a real adversary would. Chain prompt injection, tool abuse, and integration flaws into paths no guardrail benchmark ever sees. • Prove what's exploitable. Turn a jailbreak or odd model behavior into a working, reproducible exploit with clear evidence of impact. Separate real risk from refusal-bypass noise. • Map the blast radius. Follow every foothold to its end, from a poisoned document or hijacked agent to tool calls, credentials, identity, cloud, and data. Show what an attacker could actually reach through the model. • Hijack the agent. Abuse tool and function calling, MCP servers, plugins, memory, and multi-agent handoffs to make agents act against their owners. Target excessive agency, confused-deputy flaws, and broken trust boundaries. • Poison the pipeline. Attack the full AI supply chain, including training and fine-tuning data, embeddings and vector stores, model weights and serialization formats, and the MLOps infrastructure that ships them. • Read code like an attacker. Review agent frameworks, orchestration logic, and model-serving code for injection paths, unsafe output handling, and insecure design, using AI-assisted analysis to cover more ground faster. • Take models apart. Use black-box probing, adversarial input generation, model extraction, and membership inference to understand how a model really behaves and what it leaks. • Train the swarm. Translate your AI attack tradecraft into the techniques, decision logic, and evaluation data that make our agents operate like expert operators at machine speed. • Break the machine. Pressure-test the swarm's own models and agents, spot where they're naive, manipulable, or wrong, and make the human-in-the-loop calls that keep autonomous operations safe and accurate. • Build what's missing. Write scripts, harnesses, and tools that automate AI attacks at scale, and treat AI as a daily force multiplier in your own workflow. • Tell the attack story. Deliver reports and debriefs that walk engineers, executives, and counsel through the attack narrative, the business risk, and the fix. • Stay ahead of the threat. Research emerging AI attack classes, from indirect prompt injection to agent-to-agent exploitation, and feed what you learn straight into the platform. • Own your work. Balance concurrent operations and internal research with startup-level autonomy, shifting priorities as fast as the threat does.

Benefits

• 🏥 Full Health, Dental, & Vision Coverage • 📈 Meaningful Equity Ownership • 🥙 In-Office Meals • ✂️ Haircuts at the Office • 🎉 Company Sponsored Conferences & Events • 💸 401(k), HSA, and FSA Plans • 🌴 Flexible PTO