Staff Attack Engineer, AI/LLM

Job not on LinkedIn

🕒 April 10

🇺🇸 United States – Remote

💵 $223k - $275k / year

⏰ Full Time

🔴 Lead

🤖 AI Engineer

👻 Ghost score 50%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Horizon3.ai

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2019

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Horizon3. ai is a cybersecurity company that specializes in autonomous penetration testing through its platform, NodeZero. The company's mission is to proactively identify and address attack vectors before they can be exploited, allowing organizations to continuously assess their security posture across various environments including cloud, IoT, and on-premises systems. Founded by veterans from the US Special Operations and National Security sectors, Horizon3. ai offers a self-service SaaS solution that provides organizations with insights into their security vulnerabilities without requiring persistent or credentialed agents.

📋 Description

• Break AI and agentic systems and translate that research into automated, repeatable attack modules for NodeZero. • Design and execute prompt injection and defense evasion attacks, focusing on generalized, reusable patterns. • Conduct tool-use exploitation, abusing LLM agents’ access to code, file systems, APIs, and databases for attacker-realistic outcomes (e.g., context poisoning, RCE, data exfiltration, privilege escalation). • Target AI infrastructure (model serving, training pipelines, vector databases, GPU/MLOps tooling) with an understanding of real-world enterprise deployments and misconfigurations. • Research and apply model and supply chain attacks (poisoning, training data extraction, adversarial inputs, deployment pipeline abuse). • Perform threat modeling for agentic systems, mapping trust boundaries and attack surfaces and turning them into concrete attack paths. • Apply a strong productization mindset, turning manual techniques into safe, reliable, and scalable automated tooling. • Build and extend LLM-powered applications (prompting, structured output, agentic workflows). • Design with production concerns in mind: cost, safety and hallucination guardrails, reliability, and observability. • Design and extend microservices that orchestrate LLM tasks and integrate with NodeZero and related offensive workflows.

🎯 Requirements

• Expert-level Python and software engineering skills • Solid penetration testing fundamentals and understanding of common attack chains • Familiarity with AI/LLM security frameworks (e.g., OWASP Top 10 for LLMs, MITRE ATLAS) • Experience in a security product or offensive security team, ideally with shipped offensive capabilities or tooling • Proven ability to break AI/LLM and agentic systems • Clear understanding of trust boundaries around AI tools, data sources, and permissions, and how to systematically test and exploit them • Expert-level ownership – drives high-complexity, high-risk programs and sets strategy, not just execution • Self-motivated – identifies problems and builds solutions proactively • Industry obsessed – tracks the fast-moving AI security landscape and can speak to recent developments, new attacks, and where the field is heading.

🏖️ Benefits

• Health, vision & dental insurance for you and your family • Flexible vacation policy • Generous parental leave