Senior AI Security Engineer – LLM Vulnerability

Location : Remote

Type : Contract

Role Overview

We are looking for AI Security Engineers with expertise in Application Security, Product Security, and GenAI/LLM security to identify and evaluate vulnerabilities in AI-powered applications, particularly Sensitive Information Disclosure (SID) and Excessive Agency (EA).

Key Responsibilities

- Build and test vulnerable and secure AI agent/RAG codebases.
- Identify LLM vulnerabilities across tool calling, agent memory, and MCP.
- Perform secure code reviews, source-to-sink analysis, and taint analysis.
- Evaluate SAST tools and validate findings through deterministic tests.
- Analyze authorization, access controls, data flows, and security boundaries.
- Recommend security fixes and remediation strategies.

Required Skills





- Experience in Application Security, Product Security, or Security Engineering.
- Strong programming skills in Python and/or TypeScript.
- Hands-on experience with LLM agents and RAG applications.
- Familiarity with LangChain, LlamaIndex, OpenAI/Anthropic SDKs, or MCP.
- Experience with CodeQL, Semgrep, SAST, and secure code review.
- Knowledge of OAuth, IAM, authorization, multi-tenancy, and access controls.

Valuable to Have

- OWASP Top 10 for LLM Applications.
- MCP security and AI agent threat modeling.
- Prompt injection and RAG security.
- AI security evaluation experience.

📌 Senior AI Security Engineer – LLM (India)
🏢 Codefeast
📍 India