Somewhere right now, an AI agent is holding database credentials, reading untrusted emails, and calling tools nobody fully audited. Someone needs to find out what happens next before an attacker does.

At OneSpotAI, that someone is you.

We are an AI security and compliance company, and we are assembling a small research group whose job is to think like an attacker and break autonomous AI systems in controlled conditions. Then we turn what we learn into tests, tooling, and fixes that make those systems safer.

What your days look like

• Hunting for new failure modes in LLM-powered agents and the tools they connect to
• Crafting direct and indirect prompt injection chains that make agents do things they should not
• Probing MCP servers, plugins, and tool integrations for abuse paths
• Testing how far an agent can be pushed past its intended permissions
• Poking at retrieval pipelines to see how poisoned context changes behavior
• Checking where sensitive data leaks out of prompts, memory, logs, and responses




• Building attack simulations and automated test harnesses so findings can be repeated and retested
• Writing up what you found in a way engineers can act on the same day

Who will thrive here

• You write solid Python and enjoy building your own tools
• You understand how LLM apps, agents, APIs, RAG, or MCP fit together
• You have some background in red teaming, threat modeling, bug bounty, CTFs, or vulnerability research
• You are the person who asks "what if I phrase it differently?" and keeps going
• You are comfortable with open-ended problems that have no playbook yet

Proof of curiosity beats a polished resume. Write-ups, GitHub repos, research notes, conference talks, and side experiments all count.

The setup
• Contract or internship, depending on experience
• Fully remote with flexible schedule
• Direct access to the founding team
• Real ownership of research directions, not a ticket queue
• A chance to shape methods and infrastructure from day one in a f

📌 Adversarial AI Researcher (Bengaluru)
🏢 OneSpotAI
📍 Bengaluru