Security Researcher

Snyk; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Компания Snyk Ltd. ищет специалиста по исследованию AI-безопасности, который будет разрабатывать методы красного командования для автономных агентов, анализировать уязвимости в LLM и создавать инструментальные наборы для воспроизводимых экспериментов в реальном времени.

Кандидат будет тесно сотрудничать с инженерами, чтобы переводить результаты исследований в практические рекомендации и улучшать продукты Snyk в области защиты кода и безопасной автоматизации.

Qualifications

• Опыт в исследованиях кибербезопасности AI и красном командовании.
• Опыт в пентестинге Web/API и уязвимостях аутентификации/авторизации.
• Доказываемый опыт проектирования контролируемых экспериментов и оценок.

Skills

AI red teaming

Offensive security

LLM fundamentals

Harness engineering

Agent security

Evals/benchmarks

Experimental design

Research engineering

Failure analysis

Exploit reporting

Collaboration

Communication

Tools

Python

APIs

Containers

Browser automation

Research tooling

Job description

Описание

Unleash AI Innovators, Securely Software is being rewritten in real time. AI agents are starting to write more code than humans do, at a speed no security team has ever had to match, and that single shift is opening up the biggest opportunity our industry has seen in a decade. We're not bracing for it, we're building the company that owns it. Snyk is building the next generation security platform where security isn't a set of tools people operate. It's a team of security agents working alongside your engineers, finding, fixing, and governing risk at the speed software is now built. These agents work alongside both the company build and the agents they adopt. Security stops being a queue of work waiting for people, and becomes a coordinated workforce companies direct and trust. Research and exploit weaknesses in LLM applications and autonomous agents. Build attack tooling, agent harnesses, and reproducible evaluations that turn offensive research into measurable improvements in AI security and improve on Snyk’s offensive security product offering.

Требования

• AI red teaming: Prompt injection, jailbreaks, data leakage, tool abuse, and multi-step adversarial attacks.
• Offensive security: Web/API penetration testing, authentication and authorization flaws, business logic attacks, and exploit chaining.
• LLM fundamentals: Model behavior and limitations, inference, context management, retrieval, and tool calling.
• Harness engineering: Agent orchestration, tool integrations, state management, sandboxed execution, and reproducible runs.
• Agent security: Trust boundaries, permissions, memory poisoning, scope enforcement, and guardrail bypass testing.
• Evals and benchmarks: Realistic attack scenarios, ground truth, reliable graders, dataset quality, and regression suites.
• Experimental design: Controlled comparisons, repeated trials, attack success rates, precision/recall, and cost/performance measurement.
• Research engineering: Strong Python, APIs, containers, browser automation, and building maintainable research tools.
• Failure analysis: Inspecting prompts, traces, and tool outputs to distinguish model, harness, and environment failures.
• Exploit validation and reporting: Reproducible proofs of concept, demonstrated impact, false-positive analysis, and actionable remediation.
• Collaboration and communication: Collaborative research: Experience delivering research in a team and translating findings into actionable recommendations that shape priorities and strategy.
• Written and verbal communication: Clearly communicate complex research findings, risks, and tradeoffs to technical and non-technical stakeholders.

Условия

Snyk is committed to creating an inclusive and engaging environment where our employees can thrive as we rally behind our common mission to make the digital world a safer place. From Snyk employee resource groups, to global benefits that help our employees prioritize their health, wellness, financial security, and a work/life blend, we aim to support our employees along their entire journeys here at Snyk.