Senior Application Security Engineer - GenAI Security Evaluation

About the role

We are looking for experienced Application Security Engineers and Security-Focused Software Engineers to support a specialized AI security evaluation project. In this role, you will assess how effectively static analysis tools identify security vulnerabilities in Generative AI applications, particularly LLM agents and Retrieval-Augmented Generation (RAG) systems.

What you'll do

• Build runnable agent and RAG repositories containing code-reachable Sensitive Information Disclosure and Excessive Agency vulnerabilities
• Develop realistic security scenarios involving tool calling, agent memory, Model Context Protocol (MCP), and other LLM application components
• Create vulnerable, fixed, and hard-negative code variants with minimal security-relevant differences
• Evaluate static application security testing (SAST) tools and assess their ability to detect genuine vulnerabilities while avoiding false positives
• Perform source-to-sink analysis and trace relevant data flows, action paths, and trust boundaries

What you need

• 5–9 yrs of experience
• LLMs
• Python
• IAM
• TypeScript
• Any graduate