Ai/llm Security

Ai/llm Security Cybersecurity Jobs

5 jobs found

1mo ago

Full Stack Lead Security Engineer

JPMorganChase Plano, TX

Plano, TX

1mo ago Closed

Full time Ai Security Ai/llm Security Application Security

This position is no longer accepting applications (closed Nov 9, 2026).

Job Description

JPMorgan Chase is hiring for a Full Stack Lead Security Engineer position supporting Cybersecurity & Technology Controls for AI/ML. This onsite role in Plano, TX focuses on building secure software and strengthening AI and LLM security through practical red teaming, secure architecture, and automated adversarial testing. You will help deliver tamper-proof, audit-defensible solutions while working closely with teams across product, data science, cyber, legal, and risk.

What you’ll do

Develop and improve security strategies, red teaming programs, and solution designs, including troubleshooting technical issues and producing scalable outcomes.
Design secure, high-quality AI and software architectures, reviewing designs and code to ensure adversarial resilience.
Lower AI and LLM security vulnerabilities by applying industry standards and emerging AI safety research, updating policies, testing protocols, and controls.
Partner with stakeholders across product, data science, cyber, legal, and risk to understand AI use cases and recommend changes during periods of heightened vulnerability or regulatory shifts.
Automate discovery and adversarial testing for generative AI, RAG pipelines, and ML systems to identify issues such as prompt injection, jailbreaking, and data poisoning.
Provide guidance on secure design, logging, monitoring, and compensating controls for AI applications and platforms.
Define and implement AI red teaming methodologies, playbooks, and success metrics, enabling continuous testing and safe rollout of new AI models and features.
Collaborate with platform and cloud security teams to ensure secure infrastructure configuration and alignment with enterprise security architecture.
Track emerging AI threats by engaging with external researchers, vendors, and standards bodies, and bring best practices into the organization.
Contribute to a team culture that emphasizes diversity, opportunity, inclusion, and respect.
Work within a cross-functional environment to build relationships, influence senior stakeholders, and drive alignment on AI risk tolerance and mitigation priorities.

Required qualifications

Formal training or certification covering Public Cloud environment concepts and advanced hands-on experience with cloud-native AI services such as Bedrock.
Practical experience with Infrastructure as Code (IaC), including Terraform and CloudFormation.
Proficiency in Python scripting.
Strong understanding of AI/ML concepts and trends, including foundational knowledge of AI red teaming to design and implement exercises for complex AI architectures.
Ability to conceptualize, design, validate, and communicate creative technical solutions for enterprise-level security problems, including building internal tools, dashboards, and automation for red teaming.

Technologies you may use

Bedrock
Terraform
CloudFormation
Python
PyRIT
Garak
MITRE ATLAS
OWASP Top 10 for LLMs
IAM, Authentication
OIDC, SAML

Benefits

Competitive total rewards package including base salary determined based on role, experience, skill set, and location.
Eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in cash and/or forfeitable equity.
Comprehensive health care coverage.
On-site health and wellness centers.
Retirement savings plan.
Backup childcare.
Tuition reimbursement.
Mental health support.
Financial coaching.

Preferred qualifications, capabilities, and skills

Expertise in planning, designing, and implementing AI red teaming exercises and enterprise-level security solutions for generative AI, LLMs, and ML systems.
Experience using specialized AI security and red teaming tools and frameworks such as PyRIT, Garak, and custom LLM evaluation harnesses, including contributions to AI security or open-source security projects.
Experience with threat modeling, discovery, vulnerability, and penetration testing such as MITRE ATLAS and OWASP Top 10 for LLMs, plus foundational cybersecurity concepts including IAM and Authentication with OIDC and SAML.

View full job page →

1mo ago

AI Security Engineer / Application Security Engineer

Compest Solutions Inc Seattle, WA

Seattle, WA

1mo ago Closed

$50 - $55/hr Contract Adversarial Ai Security Agent Ai Security

This position is no longer accepting applications (closed Nov 3, 2026).

Job Description

Compest Solutions Inc is seeking an experienced AI Security Engineer / Application Security Engineer for an onsite contract engagement supporting security work across applications, APIs, cloud services, and AI integrations. The role is based in Seattle, WA and Sunnyvale, CA, with a focus on threat modeling and hands-on adversarial testing of AI and LLM agents.

In this position, you will help teams improve security and privacy outcomes through design reviews, vulnerability identification, and practical remediation guidance, while also supporting security automation and AI-assisted security workflows where appropriate.

Role focus

Application, API, and cloud security reviews
Threat modeling for critical services and AI agents
Adversarial testing of AI/LLM agent behaviors and integrations

Responsibilities

Conduct security and privacy design reviews for applications, APIs, cloud services, engineering proposals, and AI integrations.
Review system architecture and data flows, including access controls, trust boundaries, authentication, authorization, and security safeguards.
Perform threat modeling to identify attack surfaces, attack scenarios, attack paths, mitigations, and residual risks for critical services and AI agents.
Conduct hands-on security and adversarial testing of AI/LLM agents, including scenarios such as:
- Prompt injection
- Tool misuse
- Excessive agency
- Unauthorized data access
- Permission and access-control issues
- External integrations
- Sensitive-data exposure
Identify, validate, and document security vulnerabilities and provide practical remediation recommendations.
Collaborate with engineering, security, privacy, and third-party teams to drive remediation and validate security controls.
Develop reusable security assessment methodologies, checklists, threat models, test cases, and reporting templates.
Support security automation and AI-assisted security workflows when appropriate.

Requirements

8+ years of professional experience in security engineering, application security, product security, offensive security, systems architecture, or a related technical security field.
Experience reviewing complex technical designs and identifying security risks in: Applications, APIs, Cloud services, Microservices, and Distributed systems.
Strong understanding of threat modeling, vulnerability assessment, and risk modeling.
Strong understanding of authentication and authorization and least-privilege principles.
Strong understanding of data protection and security architecture.
Hands-on experience with security testing, vulnerability investigation, penetration testing, adversarial testing, or security-control validation.
Strong technical communication skills, including the ability to explain security findings to engineering and business stakeholders.

Preferred qualifications

Experience assessing AI/LLM applications and autonomous AI agents.
Knowledge of prompt injection, jailbreaks, unsafe tool use, excessive agency, and AI data-security risks.
Experience with privacy and security design reviews.
Experience securing cloud environments.
Security automation experience using Python, Go, Bash, or similar languages.
Familiarity with application-security frameworks and industry security practices.

Technology

Python
Go
Bash

Location and work type

Onsite in Seattle, Washington and Sunnyvale, California (local candidates required)
Contract position

Compensation

USD 50 - 55 per hour

View full job page →

1mo ago

Application Security Engineer

Compest Solutions Inc Sunnyvale, CA

Sunnyvale, CA

1mo ago Closed

$50 - $55/hr Contract Agent Ai Security Ai/llm Security

This position is no longer accepting applications (closed Nov 3, 2026).

Job Description

Compest Solutions Inc is seeking an Application Security Engineer / AI Security Engineer on a contract basis to strengthen security engineering across applications, cloud services, APIs, and AI or LLM integrations. This onsite role focuses on turning security and privacy risk into practical testing, clear documentation, and actionable remediation guidance for engineering teams.

The work spans security and privacy design reviews, threat modeling, and hands-on assessment, including adversarial testing of AI agents for common failure modes such as prompt injection and unsafe tool behavior. The position is based on-site in the Seattle, Washington and Sunnyvale, California area, with local candidates required.

Responsibilities

Conduct security and privacy design reviews for applications, APIs, cloud services, engineering proposals, and AI integrations.
Review system architecture and data flows, including access controls, trust boundaries, and authentication and authorization safeguards.
Perform threat modeling for critical services and AI agents, documenting attack surfaces, attack scenarios, attack paths, mitigations, and residual risks.
Lead hands-on security and adversarial testing for AI/LLM agents, including:
- Prompt injection
- Tool misuse
- Excessive agency
- Unauthorized data access
- Permission and access-control issues
- External integrations
- Sensitive-data exposure
Identify, validate, and document security vulnerabilities, and provide practical remediation recommendations.
Collaborate with engineering, security, privacy, and third-party teams to drive remediation and validate security controls.
Develop reusable security assessment artifacts such as methodologies, checklists, threat models, test cases, and reporting templates.
Support security automation and AI-assisted security workflows when appropriate.

Requirements

8+ years of professional experience in security engineering, application security, product security, offensive security, systems architecture, or a related technical security discipline.
Experience reviewing complex technical designs and identifying security risks in:
- Applications
- APIs
- Cloud services
- Microservices
- Distributed systems
Strong understanding of threat modeling, vulnerability assessment, and risk modeling.
Strong understanding of authentication and authorization, least-privilege, and data protection.
Strong understanding of security architecture.
Hands-on experience with security testing, vulnerability investigation, penetration testing, adversarial testing, or security-control validation.
Strong technical communication skills, with the ability to explain security findings to engineering and business stakeholders.

Preferred Qualifications

Experience assessing AI/LLM applications and autonomous AI agents.
Knowledge of prompt injection, jailbreaks, unsafe tool use, excessive agency, and AI data-security risks.
Experience with privacy and security design reviews.
Experience securing cloud environments.
Security automation experience using Python, Go, Bash, or similar languages.
Familiarity with application-security frameworks and industry security practices.

Tech

Python
Go
Bash

Location: Onsite in Seattle, Washington and Sunnyvale, California (local candidates required).
Position type: Contract
Compensation: USD 50 - 55 per hour
Minimum experience: 8 years

View full job page →

1mo ago

AI Security Engineer / Application Security Engineer

Compest Solutions Inc Sunnyvale, CA; Seattle, WA

Sunnyvale, CA; Seattle, WA

1mo ago Closed

$45 - $50/hr Contract Adversarial Ai Security Agent Ai Security

This position is no longer accepting applications (closed Nov 1, 2026).

Job Description

Compest Solutions Inc is hiring an AI Security / Application Security Engineer for an onsite contract focused on application, API, cloud, and AI/LLM integration security.

Responsibilities

Conduct security and privacy design reviews for applications, APIs, cloud services, engineering proposals, and AI integrations.
Review system architecture and data flows, including access controls, trust boundaries, authentication, authorization, and security safeguards.
Perform threat modeling for critical services and AI agents, documenting attack surfaces, attack scenarios, attack paths, mitigations, and residual risks.
Execute hands-on security testing and adversarial testing of AI/LLM agents, covering:
- Prompt injection
- Tool misuse and unsafe external integrations
- Excessive agency
- Unauthorized data access
- Permission and access-control issues
- Sensitive-data exposure
Identify, validate, and document security vulnerabilities, providing practical remediation recommendations.
Partner with engineering, security, privacy, and third-party teams to drive fixes and validate implemented security controls.
Create reusable security assessment assets including methodologies, checklists, threat models, test cases, and reporting templates.
Support security automation and AI-assisted security workflows when applicable.

Requirements

8+ years of professional experience in security engineering, application security, product security, offensive security, systems architecture, or a related technical security field.
Experience reviewing complex technical designs and identifying security risks in:
- Applications
- APIs
- Cloud services
- Microservices
- Distributed systems
Strong understanding of threat modeling.
Strong understanding of vulnerability assessment.
Strong understanding of risk modeling.
Strong understanding of authentication and authorization.
Strong understanding of least-privilege principles.
Strong understanding of data protection.
Strong understanding of security architecture.
Hands-on experience with security testing, vulnerability investigation, penetration testing, adversarial testing, or security-control validation.
Strong technical communication skills for explaining security findings to engineering and business stakeholders.

Technologies

Python
Go
Bash

Location

Onsite in Seattle, Washington and Sunnyvale, California.
Local candidates required.

Position Type

Contract
In person work location

Visa

Any Visa Will work

Pay

Pay rate: $45.00 - $50.00 per hour
Salary basis: W2 pay rate

Preferred Qualifications

Experience assessing AI/LLM applications and autonomous AI agents.
Knowledge of prompt injection, jailbreaks, unsafe tool use, excessive agency, and AI data-security risks.
Experience with privacy and security design reviews.
Experience securing cloud environments.
Security automation experience using Python, Go, Bash, or similar languages.
Familiarity with application-security frameworks and industry security practices.

Key Skills

Application Security
AI/LLM Security
Threat Modeling
Penetration Testing
Adversarial Testing
Cloud Security
API Security
Security Architecture
Vulnerability Assessment
Privacy & Data Protection
Python/Go/Bash
Security Automation

View full job page →

1mo ago

Penetration Tester

Deloitte Cincinnati, OH

Cincinnati, OH

1mo ago Closed

Full time Ai/llm Security Api Penetration Testing Application Security

This position is no longer accepting applications (closed Oct 27, 2026).

Job Description

Deloitte offers an opportunity to support Global cyber services by delivering penetration testing work for member firms. You will combine hands-on testing with technology to help uncover risks across a wide range of application and infrastructure environments, including web, API, AI/LLM, network, mobile, and thick client targets.

This onsite role in Cincinnati, OH emphasizes practical impact: translating findings into clear, actionable guidance for customers while continuously improving testing methodologies and documentation. You will also use AI/LLM tools and prompt engineering to accelerate reconnaissance and improve testing scripts and automation.

Responsibilities

Provide penetration testing services as part of the Global cyber services organization for member firms, using a mix of technology and manual ingenuity.
Execute penetration testing engagements across:
- Web Application Penetration Testing
- Web Services / API Penetration Testing
- AI/LLM Penetration Testing
- Network Penetration Testing
- Mobile Application Penetration Testing
- Thick Client Penetration Testing
Deliver consultative guidance on findings in clear, actionable writing and verbally to customers.
Enhance and update testing methodologies, processes, and standards documentation.
Leverage AI and LLM-based tools and prompt engineering to accelerate reconnaissance and generate or refine testing scripts, using both established platforms and emerging frameworks.
Build, customize, and maintain AI-driven agents to automate recurring testing tasks.
Continuously validate the accuracy and reliability of self-developed AI tools, working to reduce hallucinations and false positives in vulnerability identification.
Evaluate and integrate emerging AI-assisted offensive security tooling into team methodology and playbooks.
Analyze and understand complex architecture designs.
Communicate the services and capabilities the group can facilitate to clients.

Requirements

Experience with Kali Linux or other dedicated penetration testing OS platform.
Working knowledge of common testing tools, including Burp Professional, AMASS, Metasploit, Postman, Swagger, NMAP, Qualys, SQL Map, and others.
Familiarity with OWASP Top 10 software security weaknesses and vulnerabilities.
Familiarity with AI models and frameworks from providers such as Anthropic and OpenAI, with experience configuring tools like Obsidian and Ollama as a plus.
Working knowledge of one scripting language and familiarity with at least one software programming language and framework.
Demonstrated experience working with diverse stakeholders, preferably in global multi-national environments.
Ability to manage concurrent initiatives using sound judgment for prioritization and time management.
Strong written and verbal communication skills.
Must be a US Citizen.

Technologies

Kali Linux
Burp Professional, AMASS, Metasploit, Postman, Swagger, NMAP, Qualys, SQL Map
OWASP Top 10
Anthropic, OpenAI, Obsidian, Ollama
OWASP Application Security Top 10, OWASP API Security Top 10, OWASP Thick Client Top 10, OWASP LLM Top 10
MITRE ATT&CK Framework
Static Application Software Testing (SAST), Dynamic Application Testing (DAST)

Preferred

Certified Ethical Hacker (CEH)
Offensive Certified Security Professional (OSCP)
Any GIAC certification (GSEC, GWAB, GPEN, GMOB, GCPN)
OWASP Application Security Top 10, OWASP API Security Top 10, OWASP Thick Client Top 10, OWASP LLM Top 10
MITRE ATT&CK Framework
Cloud service testing
Reverse Engineering
Experience with agentic development and its application to support penetration testing
Limited immigration sponsorship may be available

View full job page →

Ai/llm Security Cybersecurity Jobs

Full Stack Lead Security Engineer

AI Security Engineer / Application Security Engineer

Application Security Engineer

AI Security Engineer / Application Security Engineer

Penetration Tester

Get Ai/llm Security Cybersecurity Jobs alerts