Senior QA Analyst / Tester

Orioninnovation; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Orion Innovation is seeking a Senior Red Team Tester to conduct adversarial testing of AI models and develop evaluation frameworks. You will identify vulnerabilities, simulate real-world deployment scenarios, and communicate risks to stakeholders across global teams.

The role involves collaboration with defensive and development teams to strengthen AI security posture. The ideal candidate has 5+ years in penetration testing or AI red teaming, strong knowledge of offensive security, and excellent

Qualifications

• 5+ years of penetration testing or red team operations.
• Degree in CS/IT/cybersecurity or equivalent experience.
• Experience in AI red teaming or offensive cybersecurity.
• Understanding of AI/ML, cloud computing, networking, and software apps.
• Excellent communication and stakeholder management across geographies.

Responsibilities

• Design and execute adversarial testing campaigns against AI models (LLMs, multimodal, autonomous agents).
• Research attack vectors and prompt injection techniques to identify vulnerabilities and jailbreaks.
• Conduct red team exercises, probe for bias, toxicity, misinformation, and other harmful outputs.
• Create adversarial datasets and benchmarks to evaluate model robustness.
• Collaborate with security teams to document findings and remediation recommendations.
• Develop and maintain process docs, reports, and metrics for AI Red Team activities.

Skills

Penetration testing

Red team operations

AI red teaming

Cloud computing

Networking

Stakeholder management

Education

Bachelor's degree in CS/IT/cybersecurity or related field

Tools

SPLX

Garak

TextAttack

PyRIT

Burp Suite

Metasploit

Nessus

Cobalt Strike/Mythic/C2

NMAP

sqlmap

Job description

Orion Innovation is a premier, award-winning, global business and technology services firm. Orion delivers game-changing business transformation and product development rooted in digital strategy, experience design, and engineering, with a unique combination of agility, scale, and maturity. We work with a wide range of clients across many industries including financial services, professional services, telecommunications and media, consumer products, automotive, industrial automation, professional sports and entertainment, life sciences, ecommerce, and education.

The Red Team Tester will conduct testing of AI models to find vulnerabilities, develop new evaluation frameworks, communicate risks to stakeholders across the global teams and the network of member firms, and collaborate with defensive and development teams.

Key accountabilities

• 10 Design and execute comprehensive adversarial testing campaigns against AI models, including but not limited to large language models, multimodal systems, and autonomous agents.
• 10 Research attack vectors and prompt injection techniques to identify model vulnerabilities, jailbreaks, and unintended behaviours. Evaluate and introduce AI Security tools that decrease mean time to detect and respond to AI-specific threats.
• 50 Conduct red team exercises simulating real-world deployment scenarios and edge cases. Systematically probe for bias, toxicity, misinformation generation, and other harmful outputs across diverse contexts and demographics. Improve firm’s security posture against emerging AI threats. Concentration is on executing standardized security tests.
• 10 Create adversarial datasets and benchmarks to evaluate model robustness under various attack conditions.
• 10 Collaborate with security teams (e.g., GSOC, member firm security teams, developers) to perform red teaming activities, and document and present findings, vulnerabilities, and remediation recommendations to drive the mitigation of identified risks.
• 10 Develop and maintain process documentation, create reports on testing activities, track operational metrics, and perform other programmatic tasks as required to support the AI Red Team's function.

Qualifications

• Minimum 5 years of penetration testing, red team operations, or AI Red Team experience.
• Computer science, information technology, programming, development, Artificial Intelligence, or cybersecurity degree (Bachelor's or higher preferred) from an accredited college or university or equivalent work experience.
• Background in AI red teaming, red teaming, or offensive cyber operations.
• Understanding of Artificial Intelligence, Machine Learning, software applications, cloud computing, and networking. Excellent communication and stakeholder management skills. Ability to work effectively across geographies and time zones.

Core technical skills include:

• Testing tools: SPLX, Garak, TextAttack, PyRIT, Burp Suite, Metasploit, Nessus, Cobalt Strike/Mythic/C2, NMAP, sqlmap, or similar tools
• Web application technologies and layer 7 protocols (HTTP, DNS, FTP)
• Technical knowledge of Generative AI, Agentic AI, A2A, and/or MCP
• Programming languages: Python, Ruby, Go, C++, PowerShell, bash or similar
• Certifications: OSCP, GPEN, GPXN, AI Red Teamer Job Role Path (HackTheBox), AISEC+, GASAE, GOAA, GASAE, OSAI+, or other industry AI or Red Team related certifications desired

Orion is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, citizenship status, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Candidate Privacy Policy

Orion Systems Integrators, LLC and its subsidiaries and its affiliates (collectively, “Orion,” “we” or “us”) are committed to protecting your privacy. This Candidate Privacy Policy (orioninc.com) (“Notice”) explains:

• What information we collect during our application and recruitment process and why we collect it;
• How we handle that information; and
• How to access and update that information.

Your use of Orion services is governed by any applicable terms in this notice and our general Privacy Policy.