Senior AI Security Engineer – Red Team & Defenses

WhyHireWrong?; Województwo mazowieckie; On-site; PLN 180,000 - 300,000; Full time

Job summary

WhyHireWrong? is seeking a senior security professional to identify and exploit attack paths in LLM-based features, build automated testing tooling, and work closely with engineering to remediate findings.

You will strengthen authentication, access control, and data protection across integrations and CI/CD processes. Responsibilities include threat modeling, risk assessments for new features, and supporting customer security reviews.

Qualifications

• 5+ years of experience in offensive security, application security, security engineering or related field.
• Experience attacking or assessing LLM-based systems like prompt injection, red teaming, security tooling, bug bounties, or CVEs.

Responsibilities

• Design and execute red team exercises against LLM-based features.
• Build, configure, fine-tune, and operate open-source models for automated security testing.
• Review code to identify vulnerabilities and implement fixes with engineers.
• Own and improve security controls for authentication, authorization, and data protection.
• Strengthen security across IAM, endpoint, CI/CD, and incident response readiness.
• Conduct threat modeling and risk assessments for new features and integrations.
• Support customer security reviews, audits, and security discussions.
• Track AI security threats and translate into practical testing scenarios.
• Document findings, prioritize remediation by risk, verify fixes work.

Skills

Offensive security

Application security

Security engineering

Security testing

Threat modeling

Tools

Open-source LLMs

Agent frameworks

Retrieval-augmented generation

Tool calling

Multi-agent systems

Job description

WhyHireWrong? is seeking a senior security professional to identify and exploit attack paths in LLM-based features, build automated testing tooling, and work closely with engineering to remediate findings.

You will strengthen authentication, access control, and data protection across integrations and CI/CD processes. Responsibilities include threat modeling, risk assessments for new features, and supporting customer security reviews.