Base Salary
$140k - $165k/yr
Responsibilities
- Design and execute red team operations against GenAI systems, LLM pipelines, RAG architectures, autonomous agents, APIs, SaaS products, and cloud environments.
- Conduct adversarial testing for prompt injection, indirect prompt attacks, jailbreaking, model extraction, training-data poisoning, data leakage, inference abuse, and unauthorized output manipulation.
- Use deepfake generation, voice synthesis, and spoofing techniques to test voice authentication and deepfake detection systems.
- Develop end-to-end attack chains combining GenAI, infrastructure, application, identity, and API weaknesses.
- Plan and execute penetration tests and support bug bounty efforts across web applications, APIs, SaaS products, and AWS/GCP environments.
- Perform architecture reviews, security code reviews, and threat modeling focused on AI/ML components, model integrations, and LLM-facing services.
- Build Python or similar automation for offensive security workflows, testing, compliance checks, alerting, reporting, and AI-native attack tooling.
- Partner with SecOps and security engineering to improve detections, response workflows, remediation, and defensive capabilities.
- Monitor GenAI security research, adversarial ML techniques, threat intelligence, and regulatory developments and apply relevant insights to the security program.
Requirements
- At least 3 years of hands-on penetration testing and red team experience across SaaS applications, cloud infrastructure, APIs, and web applications.
- Demonstrable hands-on experience attacking GenAI or LLM-based systems through techniques such as prompt injection, jailbreaking, model extraction, or adversarial input generation.
- Hands-on experience with deepfake tools, voice synthesis, or audio/visual spoofing technologies in an offensive or research context.
- Strong proficiency with offensive security tools such as Burp Suite, OWASP ZAP, Nmap, Metasploit, and Cobalt Strike or equivalent frameworks.
- Experience configuring and operating SAST and DAST tools and integrating them into CI/CD pipelines.
- Proficiency in a scripting or programming language, with Python strongly preferred.
- Familiarity with AI-specialized security tools or frameworks such as Garak, PyRIT, or Claude Security.
- Understanding of cloud security architecture, container security, API security, and standards including ISO 27001/27002, NIST, CIS, PCI DSS, OWASP, and SOC 2.
- Prior software development or secure architecture experience is preferred.
- Research, publication, or deep practitioner experience in adversarial machine learning, LLM security, or voice/audio deepfake detection is preferred.
- Relevant certifications such as OSCP, GPEN, GWAPT, GXPN, or CEH are preferred.
- Experience in voice biometrics, AI security, fraud prevention, or similarly high-risk product environments is preferred.
Benefits
- Remote-first work environment with regular team off-sites, company-wide events, and intentional in-person gatherings.
- Unlimited PTO.
- Health and welfare plans, including an employer-paid employee-only plan, HSA contributions, vision, and dental coverage.
- Paid parental leave for birth, adoptive, and foster parents, plus one year of diaper delivery.
- Monthly phone and internet allowance.
- Enhanced fertility and GLP-1 benefits.
- Annual learning and development stipend.
- RSUs for all employees.
Tech Stack
Categories
About Pindrop
Pindrop is the Real Human + Right Human® Platform for the AI era. As AI-driven fraud and deepfakes erode trust in digital communication, Pindrop delivers continuous identity verification and deepfake detection across voice, video, and digital interactions in real time. Enterprises rely on Pindrop to secure billions of high-risk customer interactions each year, including 7 of the top 10 U.S. banks and leading insurers and healthcare providers. Powered by models trained on more than 1.5 billion real-world interactions annually and protected by 300+ patents, Pindrop restores trust while reducing fraud, lowering operational costs, and improving customer experience. Recognized by TIME as one of 2025’s Best Inventions and by Inc. for Best in Business for Innovation, Pindrop is backed by leading investors including Andreessen Horowitz, IVP, and CapitalG. Learn more at pindrop.com.