Senior Voice Agent Red Team Security Researcher - Remote

Hamming; Austin (TX); Híbrido; USD 120.000 - 210.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive salary

Health/Dental/Vision

AI tools paid

Conferences & events

Flexible PTO

Hybrid/Remote US

Descripción de la vacante

Hamming, based in the United States, seeks an experienced security engineer to run authorized assessments of production voice and chat agents for banks and health systems. You scope engagements, execute tests, and identify security failures with real consequences.

You will reproduce findings, write fixes, and re-test to ensure they hold. You’ll share results through responsible disclosure and on stage, using threat modeling, regression coverage, and precise severity to guide customers and teams.

Formación

• 5+ years in offensive security, with authorized assessments of production applications, APIs, or agent systems.
• Hands-on AI attack work: prompt injection, jailbreak chains, tool and function-call abuse, data exfiltration through model outputs.
• Application security fundamentals: authentication and authorization bypass, injection, session and identity handling.
• Reports a developer can reproduce and a CISO can defend, and Python or TypeScript to make your work repeatable.

Responsabilidades

• Own the assessment: threat model, scope, test identities, stopping conditions, and the evidence a finding needs.
• Follow the whole path: conversation, retrieved content, identity checks, and tool permissions, to the point where the agent crosses a line.
• Work carefully in production: approved scenarios, controlled data, the customer informed, a hard stop at the agreed limit.
• Prove what's exploitable: Preconditions, reproduction, impact, and the fix, with severity stated honestly.
• Verify the remediation: turn the case into regression coverage, and teach the harness what you found by hand.

Conocimientos

Offensive security

Python

TypeScript

Security assessments

Descripción del empleo

Hamming, based in the United States, seeks an experienced security engineer to run authorized assessments of production voice and chat agents for banks and health systems. You scope engagements, execute tests, and identify security failures with real consequences.

You will reproduce findings, write fixes, and re-test to ensure they hold. You’ll share results through responsible disclosure and on stage, using threat modeling, regression coverage, and precise severity to guide customers and teams.