AI Security Engineer / Offensive Security Engineer - Technology

Truelogic; United States; Remote; USD 140,000 - 200,000; Full time

Benefits offered by this job

Remote Work

USD Pay

Paid Time Off

Autonomy

Top American Companies

Job summary

Truelogic is seeking a highly hands-on security engineer to continually attack, test, and strengthen their AI product and infrastructure. You should think like a white-hat hacker: identify vulnerabilities across agents, APIs, identity, memory, permissions, data flows, and infrastructure, then partner with engineering to fix what you find.

The role blends offensive security with solid engineering judgment, uses automation and AI agents to accelerate testing, triage issues, and progressively

Qualifications

• Strong experience in application, product, cloud, or offensive security.
• Hands-on ability to identify, exploit, debug, and remediate vulnerabilities.
• Solid understanding of modern web architecture, APIs, authentication/authorization, cloud infrastructure, and data security.
• Strong engineering fundamentals and ability to build security tooling, automation, and fixes.
• Familiarity with AI/LLM security risks and securing agentic systems.

Responsibilities

• Continuously red-team the company's product, infrastructure, APIs, and agentic systems.
• Identify and reproduce vulnerabilities, then partner with engineers through remediation.
• Test AI-specific attack surfaces including prompt injection, tool misuse, data leakage, permission escalation, memory poisoning, and unsafe agent behavior.
• Use agents, automation, and security tooling to probe systems and surface weaknesses.
• Triage findings based on exploitability, user impact, and business risk.
• Strengthen authentication, authorization, identity, secrets management, data boundaries, and infrastructure security.
• Build lightweight monitoring, testing, and defensive systems that evolve with the product.
• Help establish pragmatic security standards and development practices.

Skills

Security engineering

Offensive security

Cloud security

Web security

Automation & tooling

Tools

Security tooling

Job description

About Truelogic

At Truelogic we are a leading provider of nearshore staff augmentation services headquartered in New York. For over two decades, we’ve been delivering top-tier technology solutions to companies of all sizes, from innovative startups to industry leaders, helping them achieve their digital transformation goals.

Our team of 600+ highly skilled tech professionals, based in Latin America, drives digital disruption by partnering with U.S. companies on their most impactful projects. Whether collaborating with Fortune 500 giants or scaling startups, we deliver results that make a difference.

By applying for this position, you’re taking the first step in joining a dynamic team that values your expertise and aspirations. We aim to align your skills with opportunities that foster exceptional career growth and success while contributing to transformative projects that shape the future.

Our Client

A prominent executive networking organization focused on driving business transformation through high-level strategic discourse.

Job Summary

Our client is looking for a highly hands-on security engineer to continuously attack, test, and strengthen their AI product and infrastructure. This person should think like a white-hat hacker: spend meaningful time trying to break the system, identify vulnerabilities across agents, APIs, identity, memory, permissions, data flows, and infrastructure, then work directly with engineering to understand, prioritize, and fix what they find.

The candidate should have a strong grounding in modern application and cloud security best practices without feeling the need to reinvent the wheel, and be comfortable using automation and AI agents to accelerate security testing, vulnerability discovery, triage, and remediation. Day to day, this could mean orchestrating agents to probe the system, investigating suspicious behavior or failure modes, reproducing exploits, hardening production systems, and gradually building an iterative defensive security layer around the product.

The ideal person combines an offensive security mindset with strong engineering judgment: someone who enjoys breaking systems as much as fixing them, can distinguish theoretical risk from meaningful product risk, and can help make security an ongoing engineering practice rather than a periodic audit.

Responsibilities

• Continuously red-team the company's product, infrastructure, APIs, and agentic systems.

• Identify and reproduce vulnerabilities, then partner with engineers through remediation.

• Test AI-specific attack surfaces including prompt injection, tool misuse, data leakage, permission escalation, memory poisoning, and unsafe agent behavior.

• Use agents, automation, and security tooling to continuously probe systems and surface weaknesses.

• Triage findings based on exploitability, user impact, and business risk.

• Strengthen authentication, authorization, identity, secrets management, data boundaries, and infrastructure security.

• Build lightweight monitoring, testing, and defensive systems that improve continuously as the product evolves.

• Help establish pragmatic security standards and development practices without introducing unnecessary process.

Qualifications and Job Requirements

• Strong experience in application, product, cloud, or offensive security.

• Hands-on ability to identify, exploit, debug, and remediate vulnerabilities.

• Solid understanding of modern web architecture, APIs, authentication/authorization,

  cloud infrastructure, and data security.

• Strong engineering fundamentals and enough coding ability to build security tooling,

  automation, and fixes.

• Familiarity with AI/LLM security risks and strong interest in securing agentic systems.

• Comfortable operating in a fast-moving, zero-to-one environment where the security

  model is evolving alongside the product.

• Pragmatic judgment: knows established security best practices, applies them well, and

  knows when deeper investigation is actually warranted.

• Experience red-teaming LLM or agent systems, building automated security testing infrastructure, or working on products involving sensitive identity, memory, permissions, or user data would be particularly valuable.

• Located in Latin America.

• Fluent English level.

What We Offer

• 100% Remote Work: Enjoy the freedom to work from the location that helps you thrive. All it takes is a laptop and a reliable internet connection.

• Highly Competitive USD Pay: Earn an excellent, market-leading compensation in USD, that goes beyond typical market offerings.

• Paid Time Off: We value your well-being. Our paid time off policies ensure you have the chance to unwind and recharge when needed.

• Work with Autonomy: Enjoy the freedom to manage your time as long as the work gets done. Focus on results, not the clock.

• Work with Top American Companies: Grow your expertise working on innovative, high-impact projects with Industry-Leading U.S. Companies.

Why You’ll Like Working Here

• A Culture That Values You: We prioritize well-being and work-life balance, offering engagement activities and fostering dynamic teams to ensure you thrive both personally and professionally.

• Diverse, Global Network: Connect with over 600 professionals in 25+ countries, expand your network, and collaborate with a multicultural team from Latin America.

• Team Up with Skilled Professionals: Join forces with senior talent. All of our team members are seasoned experts, ensuring you're working with the best in your field.