12 Nov
|
Codefeast
|
India
Senior AI Security Engineer – LLM Vulnerability
Location:
Remote Type : Contract Role Overview We are looking for AI Security Engineers with expertise in Application Security, Product Security, and GenAI/LLM security to identify and evaluate vulnerabilities in AI-powered applications, particularly Sensitive Information Disclosure (SID) and Excessive Agency (EA).
Key Responsibilities
• Build and test vulnerable and secure AI agent/RAG codebases.
• Identify LLM vulnerabilities across tool calling, agent memory, and MCP.
• Perform secure code reviews, source-to-sink analysis, and taint analysis.
• Evaluate SAST tools and validate findings through deterministic tests.
• Analyze authorization, access controls, data flows, and security boundaries.
• Recommend security fixes and remediation strategies. Required Skills
• Experience in Application Security, Product Security, or Security Engineering.
• Strong programming skills in Python and/or TypeScript.
• Hands-on experience with LLM agents and RAG applications.
• Familiarity with LangChain, LlamaIndex, OpenAI/Anthropic SDKs, or MCP.
• Experience with CodeQL, Semgrep, SAST, and secure code review.
• Knowledge of OAuth, IAM, authorization, multi-tenancy, and access controls. Positive to Have
• OWASP Top 10 for LLM Applications.
• MCP security and AI agent threat modeling.
• Prompt injection and RAG security.
• AI security evaluation experience.
📌 Senior AI Security Engineer – LLM (India)
🏢 Codefeast
📍 India