Source Job

$238,000–$280,000/yr
US

  • Define the long-term technical vision for AI/LLM offense and drive its integration into NodeZero's autonomous pentesting platform.
  • Lead research and productization of attacks on LLM applications, agentic systems, and AI infrastructure.
  • Partner with senior leadership to shape strategy, standards, and execution across engineering teams.

Python Offensive Security AI/LLM Security Penetration Testing Vulnerability Research

20 jobs similar to Principal Attack Engineer

Jobs ranked by similarity.

$235,000–$275,000/yr
Global

  • Break AI and agentic systems and turn research into automated, repeatable attacks for NodeZero.
  • Design and execute prompt injection, defense evasion, and tool-use exploitation against AI infrastructure.
  • Build and extend LLM-powered applications and microservices, focusing on production safety and reliability.

Horizon3 is a cybersecurity company whose NodeZero platform delivers autonomous pentests to find exploitable attack vectors. It’s a fast-growing, fully remote team of engineers and former special ops operators with a culture of respect and ownership.

US

  • You'll lead and develop the Webapp and AI Attack engineering teams, setting direction, goals, and expectations.
  • You'll own the strategy and execution of the portfolio, partnering with product, platform, and customer-facing teams.
  • You'll guide capabilities from research through production, including web application testing and AI/LLM security assessments.

Horizon3 is a fast-growing, remote cybersecurity company that builds NodeZero, an autonomous pentesting platform for finding exploitable attack vectors. They are a fusion of former special ops cyber operators and engineers, committed to a culture of respect, collaboration, ownership, and results.

North America

  • Conduct original offensive research against Dia, including prompt injection, sandbox escape, and cross-profile data access.
  • Threat model new surfaces with engineering teams and review features before they ship.
  • Build automated vulnerability discovery systems, including fuzzing and AI-assisted hunting pipelines.

The Browser Company is building a better way to use the internet, with a focus on an AI-powered browser called Dia. They are a remote-first team of nearly 100 people who value diversity and craft.

Ukraine Unlimited PTO

  • Lead red team operations to proactively identify weaknesses across GenAI, cloud, and product systems.
  • Conduct adversarial testing on LLMs, including prompt injection, jailbreaks, and model extraction.
  • Partner with security engineering to turn findings into actionable defense improvements.

Pindrop is a cybersecurity company delivering continuous identity verification across voice, video, and digital interactions. Protecting billions of high-risk interactions, it is backed by leading investors and recognized for innovation.

$105,820–$135,420/yr
North America

  • Conduct manual pentests on core systems and AI agents, building automation to expand coverage.
  • Define how we pentest AI, including LLM applications and agent-generated code.
  • Triage SAST findings, review code across web/APIs/AWS, and communicate risk to engineers.

We are a financial technology company based in Boston, unlocking capital for small businesses across America with fast, flexible funding. Our remote-first team, recognized as a Best Place to Work, has provided over $4.8 billion to more than 92,000 small businesses since 2012.

Global

  • Design and build red team agents, architecting harnesses, tools, and MCP servers to encode offensive tradecraft.
  • Drive full-chain attack operations across Windows, Active Directory, on-prem, cloud, and network surfaces.
  • Build detection-evasion capabilities, cyber ranges, and benchmarks to verify agent improvements against real defenses.

Cogent is an applied AI lab building AI agents for cybersecurity, using its AI Taskforce to assess petabytes of enterprise data and prevent breaches. Backed by Greylock and Bain Capital Ventures, the team includes experts from top universities, leading tech companies, and world-class cybersecurity firms.

US Unlimited PTO

  • Run full kill chains against web, mobile, API, and thick/thin clients, proving exploitability and mapping blast radius.
  • Train the swarm by translating your tradecraft into reasoning and evaluation data for autonomous AI attackers.
  • Pressure-test the swarm, build tools, and tell the attack story to engineers and executives.

Armadin builds autonomous proactive security, deploying AI agents that discover and remediate threats before breaches. We're a scrappy, high-ownership team of elite researchers and engineers, led by Kevin Mandia, with startup-level autonomy.

$238,000–$280,000/yr
Global

  • Design and build production-grade Python reconnaissance workflows to discover and enumerate external-facing assets at scale.
  • Research and parse messy external data sources to turn unstructured information into actionable attack intelligence.
  • Automate multi-step attack paths from initial access to post-exploitation, and mentor engineers to raise the bar.

Horizon3 is a fast-growing, remote cybersecurity company that builds NodeZero, an autonomous pentesting platform. The team is a fusion of former special operations cyber operators and startup engineers, committed to a culture of respect, collaboration, and results.

Global Unlimited PTO

  • Design, develop, and deploy AI-powered tools, agents, and automation that streamline workflows across the organization.
  • Connect LLMs and AI applications with internal systems, APIs, and enterprise tools to enable intelligent operations.
  • Own the infrastructure, security, monitoring, and reliability needed to scale AI solutions in production.

Phantom is building a self-custody crypto wallet and trading app that provides access to global markets, including perpetuals, prediction markets, tokenized assets, stablecoins and memes. The company is around 180 people, fully remote, and backed by a $150M Series C from a16z, Sequoia Capital and Paradigm.

North America

  • Architect detection engineering and incident response strategy across cloud, identity, endpoints, and AI/ML pipelines.
  • Design AI-assisted SecOps workflows that automate triage, enrichment, and containment using LLMs and custom tooling.
  • Lead investigations, purple-team testing, and threat intelligence to defend against AI-driven threats.

Fullscript is a health technology company that empowers practitioners to deliver better care through clinical insights, analytics, education, and supplements. With over 125,000 practitioners and 10 million patients, it fosters a people-first, collaborative culture and flexible remote-friendly work.

$275,000–$300,000/yr
US Europe

  • Set technical direction for production agent systems, including orchestration, tool use, memory management, and failure recovery.
  • Build and operate shared foundations: evaluation frameworks, observability, execution controls, and model access with routing and failover.
  • Work with security and platform teams to ensure scoped permissions, data isolation, audit trails, and safe execution of tools and code.

Cobalt runs AI agents in production that test real customer applications, operating at the forefront of the pentesting industry. The company is rapidly expanding, offering a collaborative culture with mentorship, competitive compensation, and a focus on growth.

US

  • Investigate and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information.
  • Translate technical findings into clear attack paths, business impact, and actionable remediation, and drive durable fixes through verified closure.
  • Build and operate security tools and integrations using code, APIs, automation, and AI agents, and design controls for agent access and execution.

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. They value diverse perspectives and are an equal opportunity employer.

US

  • Own security solutioning for k0rdent AI across the full stack, from hardware to AI models.
  • Publish reference architectures and proofs of concept with customers and partners.
  • Research emerging threats and present to engineers, executives, and conference audiences.

Mirantis, an IREN company, is the Kubernetes-native AI infrastructure company enabling organizations to build scalable, secure infrastructure for AI and data-intensive applications. It is a distributed, world-class team committed to openness and technical excellence.

Global

  • Lead technical discovery and turn ambiguous cyber needs into a tractable plan with clear architecture and acceptance criteria.
  • Build and integrate AI-enabled security workflows using production software, APIs, telemetry, and security systems.
  • Deploy, operate, and evaluate AI workflows in customer environments, ensuring security, maintainability, and handover.

Eliza is a technology services company and Advanced-tier OpenAI partner that helps organizations build and deploy AI solutions, including generative AI, custom LLM integrations, predictive analytics, and intelligent automation. The company has a collaborative, mission-driven team focused on real-world AI impact and values adaptability, ownership, and hands-on client collaboration.

Latin America

  • Emulate external attackers, malicious insiders, compromised identities, and autonomous adversarial agents.
  • Validate vulnerabilities and configuration weaknesses to determine practical exploitability and develop realistic attack paths across web, cloud, identity, and infrastructure.
  • Conduct purple-team exercises and translate offensive findings into actionable improvements for detection and response.

Backblaze is the object storage leader in the open cloud movement, providing cloud storage services to businesses, developers, and individuals. Founded in 2007 and publicly traded since 2021, the company generates over $136M in annual recurring revenue, manages over three billion gigabytes of data for 500K+ customers in 175+ countries, and fosters a culture centered on diversity, equity, and inclusion.

UK Unlimited PTO

  • Collaborate with sales to engage clients and architect tailored AI security solutions.
  • Conduct product demonstrations, PoCs, and technical presentations to prospective clients.
  • Provide pre- and post-sales support, training, and enablement to clients and internal teams.

HiddenLayer protects the world's most valuable technologies from adversarial AI attacks. The company is a fully remote, fast-growing startup backed by $100M in Series B funding, with a global team and a strong focus on innovation and culture.

India

  • Deliver end-to-end threat intelligence enablement and technical onboarding, optimizing customer digital footprints and alert rules for noise-free monitoring.
  • Develop custom automation scripts, AI agents, and SOAR playbooks to streamline security workflows and enhance platform adoption.
  • Drive customer retention through proactive engagement, churn risk analysis, and adaptive threat reporting.

SOCRadar provides Extended Threat Intelligence (XTI) solutions that help organizations proactively secure their attack surfaces and gain visibility into surface, deep, and dark web threats. The company is focused on innovation, global expansion, and delivering automation-enabled security to enterprises worldwide.

$75,500–$96,000/yr
US 4w PTO

  • Build AI agents and LLM-assisted workflows to triage, enrich, and resolve security alerts.
  • Develop and maintain security data pipelines that collect, normalize, and route telemetry.
  • Collaborate with Cyber Operations to automate manual steps and document decision paths.

HealthEquity empowers healthcare consumers by providing HSAs and related financial solutions. The company fosters a collaborative, purpose-driven culture and values authenticity and innovation.

$0–$185,800/yr
Global 26w maternity 26w paternity

  • Design and build security solutions across application security, infrastructure, and AI agentic systems.
  • Secure integrations, manage secrets, and review public-facing APIs for vulnerabilities.
  • Develop AI governance standards and security review agents to protect user trust.

Wave builds mobile financial services across Africa, making cash deposits, withdrawals, and payments accessible to millions. With a rapidly growing team in 9 countries and a remote-first culture, Wave fosters autonomy and ownership.

US

  • Design and implement agentic workflows combining LLM reasoning, structured data, and external tools to accelerate new product delivery.
  • Lead experimentation with multi-step reasoning, RAG, tool orchestration, and emerging paradigms to improve analyst workflows.
  • Shape Apptopia's long-term AI strategy and core modeling efforts, from AI-native systems to LLM-derived features and ensemble methodologies.

Apptopia provides actionable competitive intelligence to investment firms and financial institutions by estimating worldwide downloads, revenues, and active users for every mobile app, plus app user behavior insights. It's a high-growth startup backed by Mark Cuban and ABS Capital, serving clients like Google, Facebook, and top hedge funds with an intuitive business intelligence tool.