Senior Security Researcher – Red Team

🔥 0 minutes ago

🇺🇦 Ukraine – Remote

💵 $125k - $165k / year

⏳ Contract/Temporary

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Pindrop

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2011

🛡️ Insurance

💼 Consulting

🏥 Healthcare

Insurance • Consulting • Healthcare

Pindrop is a leader in voice authentication and fraud detection, offering innovative solutions to enhance the security of voice communications. The company uses advanced technologies such as liveness detection, behavioral analysis, and voice biometrics to combat threats like deepfakes and spoofing in various sectors including banking, finance, insurance, and retail. Pindrop integrates with platforms like Five9 to provide multifactor authentication, ensuring both the protection of sensitive information and a seamless user experience. With a focus on securing call centers and smart devices, Pindrop helps businesses prevent fraud and improve customer interactions by leveraging cutting-edge audio, voice, and AI technologies. Their solutions are trusted by some of the largest financial institutions and insurance companies around the world.

📋 Description

• Design and execute red team operations against Pindrop’s GenAI systems, LLM pipelines, RAG architectures, autonomous agents, APIs, SaaS products, and cloud environments • Conduct adversarial testing for prompt injection, indirect prompt attacks, jailbreaking, model extraction, training-data poisoning, data leakage, inference abuse, and unauthorized output manipulation • Use deepfake generation, voice synthesis, and spoofing techniques to test voice authentication and deepfake detection capabilities • Develop attack chains combining GenAI vulnerabilities with infrastructure, application, identity, and API weaknesses • Plan and execute penetration tests and support bug bounty efforts across web applications, APIs, SaaS products, and AWS/GCP environments • Perform architecture reviews, security code reviews, and threat modeling focused on AI/ML vulnerabilities and LLM-facing services • Build automation for offensive security workflows, testing, compliance checks, alerting, and reporting using Python or similar scripting languages • Partner with SecOps and security engineering to improve detections, response workflows, remediation, and defensive improvements • Monitor GenAI security research, adversarial ML techniques, threat intelligence, and regulatory developments and apply insights to Pindrop’s security program

🎯 Requirements

• 3+ years of hands-on penetration testing and red team experience across SaaS applications, cloud infrastructure, APIs, and web applications • Demonstrable experience attacking GenAI or LLM-based systems, including prompt injection, jailbreaking, indirect prompt attacks, model extraction, or adversarial input generation • Hands-on experience with deepfake tools, voice synthesis, or audio/visual spoofing technologies in an offensive or research context • Strong proficiency with offensive security tooling such as Burp Suite, OWASP ZAP, Nmap, Metasploit, Cobalt Strike, or equivalent frameworks • Experience configuring and operating SAST and DAST tools and integrating them into CI/CD pipelines • Proficiency in at least one scripting or programming language, with Python strongly preferred, for custom attack tooling and workflow automation • Familiarity with AI-specialized security tools or frameworks such as Garak, PyRIT, Claude Security, or similar adversarial ML tooling • Strong understanding of cloud security architecture, container security, API security, and common security standards including ISO 27001/27002, NIST, CIS, PCI DSS, OWASP, and SOC 2 • Prior software development or secure architecture experience, including the ability to reason about production code across multiple languages • Research, publication, or deep practitioner background in adversarial machine learning, LLM security, or voice/audio deepfake detection • Relevant certifications such as OSCP, GPEN, GWAPT, GXPN, CEH, or equivalent • Prior experience in voice biometrics, AI security, fraud prevention, or similarly high-risk product environments

🏖️ Benefits

• Competitive compensation, including equity for all employees • Unlimited Paid Time Off (PTO) • Remote-first culture