Senior Security Researcher – Red Team
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Researcher conducting red-team operations against GenAI, deepfake, cloud, and voice-security systems. Strengthening Pindrop’s cybersecurity platform through offensive research and attack automation.
Responsibilities:
- Design and execute red team operations against Pindrop’s GenAI systems, LLM pipelines, RAG architectures, autonomous agents, APIs, SaaS products, and cloud environments
- Conduct adversarial testing for prompt injection, indirect prompt attacks, jailbreaking, model extraction, training-data poisoning, data leakage, inference abuse, and unauthorized output manipulation
- Use deepfake generation, voice synthesis, and spoofing techniques to test voice authentication and deepfake detection capabilities
- Develop attack chains combining GenAI vulnerabilities with infrastructure, application, identity, and API weaknesses
- Plan and execute penetration tests and support bug bounty efforts across web applications, APIs, SaaS products, and AWS/GCP environments
- Perform architecture reviews, security code reviews, and threat modeling focused on AI/ML vulnerabilities and LLM-facing services
- Build automation for offensive security workflows, testing, compliance checks, alerting, and reporting using Python or similar scripting languages
- Partner with SecOps and security engineering to improve detections, response workflows, remediation, and defensive improvements
- Monitor GenAI security research, adversarial ML techniques, threat intelligence, and regulatory developments and apply insights to Pindrop’s security program
Requirements:
- 3+ years of hands-on penetration testing and red team experience across SaaS applications, cloud infrastructure, APIs, and web applications
- Demonstrable experience attacking GenAI or LLM-based systems, including prompt injection, jailbreaking, indirect prompt attacks, model extraction, or adversarial input generation
- Hands-on experience with deepfake tools, voice synthesis, or audio/visual spoofing technologies in an offensive or research context
- Strong proficiency with offensive security tooling such as Burp Suite, OWASP ZAP, Nmap, Metasploit, Cobalt Strike, or equivalent frameworks
- Experience configuring and operating SAST and DAST tools and integrating them into CI/CD pipelines
- Proficiency in at least one scripting or programming language, with Python strongly preferred, for custom attack tooling and workflow automation
- Familiarity with AI-specialized security tools or frameworks such as Garak, PyRIT, Claude Security, or similar adversarial ML tooling
- Strong understanding of cloud security architecture, container security, API security, and common security standards including ISO 27001/27002, NIST, CIS, PCI DSS, OWASP, and SOC 2
- Prior software development or secure architecture experience, including the ability to reason about production code across multiple languages
- Research, publication, or deep practitioner background in adversarial machine learning, LLM security, or voice/audio deepfake detection
- Relevant certifications such as OSCP, GPEN, GWAPT, GXPN, CEH, or equivalent
- Prior experience in voice biometrics, AI security, fraud prevention, or similarly high-risk product environments
Benefits:
- Competitive compensation, including equity for all employees
- Unlimited Paid Time Off (PTO)
- Remote-first culture
Similar Jobs
Security Advisor II, Falcon Complete
Security Advisor assessing Falcon environments and improving customer security posture. Guiding CrowdStrike Falcon Complete customers through remediation, reporting, and technical issue resolution.
Security Advisor II, Falcon Complete
Security Advisor guiding CrowdStrike Falcon Complete customers toward stronger security posture. Assessing Falcon environments, recommending remediation, and resolving customer issues.
Regional Sales Director – Identity Security
Regional Sales Director leading Cyera’s Pacific Northwest sales team. Building territory growth and exceeding quotas for Cyera’s AI and data security platform.
Information Security, Compliance & Internal Controls Manager – ISO 27001
Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS-2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s AI-driven application and cloud security for media measurement platforms. Building automated DevSecOps guardrails, vulnerability remediation, and secure AWS development workflows.
Staff Software Engineer, Security Factory – Static Analysis
Staff software engineer directing GitLab's AI-assisted static analysis engine and SAST capabilities. Defining program-analysis architecture, trustworthy agent tooling, and security detection quality.
Cybersecurity Director
Cybersecurity Director leading Cummins’ global application, cloud, vulnerability, and penetration-testing security strategy. Translating technical findings into enterprise risk decisions and enabling secure Frontier AI adoption.
Azure Cloud & Security Engineer
Azure Cloud & Security Engineer building secure, scalable Azure infrastructure for CI&T’s enterprise AI transformation solutions. Managing Bicep IaC, Azure DevOps pipelines, Container Apps, KEDA autoscaling, and cloud security.
Senior IT Systems Specialist – IAM & Security – F5 BIG-IP, Keycloak, Nevis
Senior IAM & Security specialist operating F5 BIG-IP, Keycloak and Nevis solutions for a Swiss recruiting agency client. Securing authentication and access to business-critical applications, APIs and portals.
Information Security Compliance Intern
Information Security Compliance Intern supporting audit partner operations at Sprinto, an autonomous trust platform. Building AI-assisted workflows for compliance and evidence mapping.
Cybersecurity Intern – Application Security
Cybersecurity intern supporting application security projects at GuidePoint Security, a cybersecurity solutions provider. Building skills through technical development, security response, training, and expert mentorship.
Senior Security and Compliance Specialist
Senior Security and Compliance Specialist securing Veterans Affairs technology programs. Applying NIST, FISMA, and compliance expertise to support federal digital services and ATO activities.
Information Security Architect – AI
AI Security Architect designing secure frameworks for Cotiviti’s AI systems. Leading threat modeling, testing, compliance, and data protection across the AI lifecycle.
Senior Security Engineer
Senior Security Engineer securing ICT processes and assets at XTB, a global online financial trading company. Managing incidents, vulnerabilities, security tools, threat modeling, and cybersecurity training.
Senior Security Engineer – Red Team
Red-team security engineer conducting penetration tests and threat research for Insider One’s AI-powered marketing and customer engagement platform. Supporting secure development across agile teams.
Group IT Security Manager
Group IT Security Manager securing Bolton’s global FMCG technology infrastructure. Leading Zero Trust, SOC effectiveness, incident response and security architecture initiatives from Milan.
Enterprise AI Security Engineer
Enterprise AI Security Engineer building guardrails, detections, and telemetry for Lilly’s enterprise AI systems. Integrating AI security controls across cloud, identity, endpoint, and operations platforms.
Enterprise AI Security Advisor
Enterprise AI Security Advisor securing agents, models, and AI infrastructure for Lilly’s global pharmaceutical business. Setting enterprise controls, testing standards, and security strategy.
Senior Security Advisor – Lead Control Assessor
Senior Security Advisor leading NIST 800-53 cybersecurity control assessments for Soteria’s clients. Coordinating assessors, validating evidence, and presenting findings to executives and boards.
Senior Zscaler Security Engineer
Senior Zscaler Security Engineer operating and expanding Zscaler Zero Trust environments for federal agencies. Integrating security, identity, monitoring, and service-management platforms.