Senior Security Engineer, Red Team

🕒 vor 1 Monat

🇺🇸 Vereinigte Staaten – Remote

💵 $140.000 - $165.000 / Jahr

⏰ Vollzeit

🟠 Senior

👮‍♂️ IT-Sicherheitsingenieur

🦅 H1B-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit H1B-Visa gesponsert.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Pindrop

WebsiteLinkedInAlle Stellen

201 - 500 Mitarbeiter

Gegründet 2011

🛡️ Versicherung

💼 Beratung

🏥 Gesundheitswesen

Insurance • Consulting • Healthcare

Pindrop ist ein führender Anbieter von Sprachauthentifizierung und Betrugserkennung und bietet innovative Lösungen zur Verbesserung der Sicherheit von Sprachkommunikationen. Das Unternehmen nutzt fortschrittliche Technologien wie Lebendigkeitserkennung, Verhaltensanalysen und Sprachbiometrie, um Bedrohungen wie Deepfakes und Spoofing in verschiedenen Sektoren, darunter Banken, Finanzen, Versicherungen und Einzelhandel, zu bekämpfen. Pindrop integriert sich in Plattformen wie Five9, um eine mehrstufige Authentifizierung bereitzustellen, die sowohl den Schutz sensibler Informationen als auch ein nahtloses Benutzererlebnis garantiert. Mit einem Schwerpunkt auf der Sicherung von Callcentern und intelligenten Geräten hilft Pindrop Unternehmen, Betrug zu verhindern und Kundeninteraktionen zu verbessern, indem es modernste Audio-, Sprach- und KI-Technologien einsetzt. Ihre Lösungen werden von einigen der größten Finanzinstitute und Versicherungsunternehmen weltweit vertraut.

Beschreibung

• As a Security Engineer (Red Team), you will help Pindrop proactively identify and exploit weaknesses across product, cloud, and AI-powered systems so we can strengthen defenses before adversaries do. • Design and execute red team operations against Pindrop’s GenAI systems, LLM pipelines, RAG architectures, autonomous agents, APIs, SaaS products, and cloud environments, simulating real-world attacks across both traditional and AI-specific attack surfaces. • Conduct adversarial testing focused on prompt injection, indirect prompt attacks, jailbreaking, model extraction, training-data poisoning, data leakage, inference abuse, and unauthorized output manipulation. • Use deepfake generation, voice synthesis, and related spoofing techniques to test and attempt to defeat Pindrop’s voice authentication and deepfake detection capabilities, helping identify model robustness and detection gaps. • Develop novel attack chains that combine GenAI vulnerabilities with infrastructure, application, identity, and API weaknesses to create realistic end-to-end threat scenarios. • Plan and execute full-scope penetration tests and support bug bounty efforts across Pindrop’s web applications, APIs, SaaS products, and AWS/GCP environments using commercial and open-source offensive tooling. • Perform architecture reviews, security code reviews, and threat modeling with emphasis on vulnerabilities introduced by AI/ML components, model integrations, and LLM-facing services. • Build automation for offensive security workflows, testing, compliance checks, alerting, and reporting using Python or similar scripting languages, including AI-native attack tooling where useful. • Partner closely with SecOps and security engineering to improve detections, tune response workflows, and translate red team findings into practical remediation and defensive improvements. • Stay current on GenAI security research, adversarial ML techniques, evolving threat intelligence, and relevant regulatory developments, then apply those insights to Pindrop’s security program.

🎯 Anforderungen

• 3+ years of hands-on penetration testing and red team experience across SaaS applications, cloud infrastructure, APIs, and web applications. • Demonstrable experience attacking GenAI or LLM-based systems, including prompt injection, jailbreaking, indirect prompt attacks, model extraction, or adversarial input generation. • Hands-on experience with deepfake tools, voice synthesis, or audio/visual spoofing technologies in an offensive or research context. • Strong proficiency with offensive security tooling such as Burp Suite, OWASP ZAP, Nmap, Metasploit, Cobalt Strike, or equivalent frameworks. • Experience configuring and operating SAST and DAST tools and integrating them into CI/CD pipelines. • Proficiency in at least one scripting or programming language, with Python strongly preferred, for custom attack tooling and workflow automation. • Familiarity with AI-specialized security tools or frameworks such as Garak, PyRIT, Claude Security, or similar adversarial ML tooling. • Strong understanding of cloud security architecture, container security, API security, and common security standards including ISO 27001/27002, NIST, CIS, PCI DSS, OWASP, and SOC 2.

🏖️ Vorteile

• Competitive compensation package, including RSUs (Restricted Stock Units) for all employees, so everyone shares in our long-term success. • Remote-first environment - giving you flexibility and autonomy in how you structure your day. • While we work flexibly, we prioritize meaningful in-person moments through regular team on-sites, company-wide events, and intentional gatherings that foster connection, collaboration, and shared success. • Unlimited Paid Time Off (PTO) • Generous health and welfare plans to choose from - including one employer-paid “employee-only” plan! • Best-in-class Health Savings Account (HSA) employer contribution • Low-cost vision and dental plans for you and your family, providing comprehensive coverage and peace of mind. • Paid Parental Leave - Including birth, adoptive & foster parents • One year of diaper delivery for your newest addition to the family! It’s our way of welcoming new Pindroplets to the family! • Recurring monthly phone and internet allowance to help cover essential connectivity costs and support flexible work. • Enhanced fertility and GLP-1 benefits to support family-building journeys and personalized health needs. • Annual Learning & Development stipend to support your professional growth, skill-building, certifications, and continued education.