AI Security Architect - Offensive Security Lead (Gaming)

Neurons Lab; Germany (OH); On-site; USD 120,000 - 210,000; Full time

Job summary

Neurons Lab is seeking a security domain expert to lead an offensive-security engagement for an AI-driven security stack in regulated iGaming environments. You will sit with a hands-on CISO team, validate and improve the existing pipeline, and own the methodology.

The initial discovery and PoC work will shape a formal advisory roadmap, with ongoing focus on in-perimeter design, data sovereignty, and regulatory certification constraints.

Qualifications

• Hands-on offensive security experience with vulnerability research and exploit development.
• Experience in web and network penetration testing with industry tools.
• Experience building and operating LLM agents for security workflows.
• Experience with self-hosted/open models and cost/performance trade-offs.
• Ability to communicate complex security concepts to executives.

Responsibilities

• Join client sessions to challenge and harden the AI-driven offensive pipeline end-to-end.
• Design and refine the exploitation agent and plan attack paths.
• Benchmark models (local vs frontier) for recon, exploitation, and analysis.
• Shape runtime anomaly-detection and automated response flows.
• Lead a quick-win PoC and translate findings into a defensible roadmap.
• Maintain in-perimeter development and respect certification constraints.

Skills

Offensive security

Vulnerability research

Exploit development

Penetration testing

LLM agent design

Python scripting

Shell scripting

Cloud security

Tools

Nmap

Nuclei

Katana

Acunetix

Metasploit

Burp Suite

Kali tools

AWS Bedrock

Job description

Neurons Lab is seeking a security domain expert to lead an offensive-security engagement for an AI-driven security stack in regulated iGaming environments. You will sit with a hands-on CISO team, validate and improve the existing pipeline, and own the methodology.

The initial discovery and PoC work will shape a formal advisory roadmap, with ongoing focus on in-perimeter design, data sovereignty, and regulatory certification constraints.