Principal Attack Engineer, AI/LLM

This is a fully remote position, open to applicants in United States.

📋 Description

• Establish the long-term technical vision for AI/LLM initiatives and their integration into NodeZero and Horizon3’s product strategy.

• Collaborate with senior engineering, product, and business leadership on strategic priorities, investments, risk management, and roadmaps.

• Provide direction for complex, high-risk, and business-critical AI/LLM programs.

• Lead cross-company initiatives involving Attack Engineering, Platform, Product, customer-facing teams, and other technical departments.

• Identify systemic challenges and drive effective, lasting solutions.

• Establish standards for reliability, safety, observability, evaluation, testing, cost management, and operational readiness.

• Mentor and develop P5 engineers and senior technical leaders.

• Manage NodeZero’s OWASP Top 10 coverage strategy for LLM Applications and expand it to encompass multi-agent and tool-connected systems.

• Determine the research and productization agenda for cutting-edge AI and agentic systems.

• Recognize new attack classes and create repeatable frameworks and coverage models.

• Direct strategies for prompt injection, defense evasion, tool exploitation, context poisoning, remote code execution, data exfiltration, and privilege escalation.

• Guide assessments of AI infrastructure, model serving, training pipelines, vector databases, GPU/MLOps tools, and enterprise deployments.

• Implement threat modeling for agentic systems.

• Transform research into safe, reliable, and scalable capabilities for NodeZero products.

• Design the architecture for LLM-powered offensive applications, agentic workflows, evaluation systems, and NodeZero integration.

• Oversee microservices and shared platforms that orchestrate LLM tasks.

• Lead architectural transformations while ensuring sustainable operations through ownership, incident learning, and measurable quality standards.

• Represent Horizon3 through technical writing, speaking engagements, research, or open-source contributions when appropriate.

• Be prepared to travel up to 10% as necessary.

⛳️ Requirements

• Outstanding Python programming and software engineering skills.

• Extensive experience in designing secure, reliable, observable, and operable systems at scale.

• Profound expertise in offensive security, penetration testing, exploit development, vulnerability research, or closely related fields.

• Recognized authority in AI/LLM and agentic-system security.

• In-depth knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS.

• Proven track record of delivering or influencing high-impact security capabilities, platforms, research initiatives, or technical standards across multiple teams.

• Capability to define a long-term technical vision, navigate ambiguous challenges, and drive execution through influence.

• Company-wide technical acumen regarding product value, safety, reliability, costs, speed, and maintainability.

• Ability to nurture senior technical talent and enhance mentorship opportunities.

• Experience in setting technical direction or architecture across an engineering organization or various product areas.

• Contributions to AI security research recognized at the industry level through publications, conference presentations, CVEs, open-source projects, or widely adopted techniques.

• Experience in strategizing for AWS Bedrock, AWS Agent Core, Azure OpenAI, or Google Vertex AI.

• Familiarity with agentic architectures, tool-use security, retrieval systems, vector databases, graph databases like Neo4j, or AI infrastructure security.

• Background in traditional exploit development, vulnerability research, or building offensive security platforms at a large scale.

• CTF experience, especially in AI/ML-focused challenge categories.

• Legally authorized to work in the United States.

🏝️ Benefits

• All full-time positions are eligible for an equity package in the form of stock options.

• Opportunities for career development.

• A collaborative environment that fosters creativity and innovative thinking.

• Health, vision, and dental insurance for you and your family.

• Flexible vacation policy.

• Generous parental leave.

• An inclusive culture.

• Fully remote work model.

• Up to 10% travel required.