Security Engineer (AI & Offensive Security) - Nearshore Staff Augmentation

The ideal candidate is a hands-on security engineer with an offensive mindset, tasked with continuously red-teaming an AI product and infrastructure. This role requires someone who can think like a white-hat hacker, spending time breaking systems to identify vulnerabilities across agents, APIs, identity, memory, permissions, data flows, and infrastructure. The engineer will then collaborate with the development team to prioritize and remediate findings.

Key Responsibilities:

• Continuously red-team the company’s product, infrastructure, APIs, and agentic systems to uncover vulnerabilities.
• Identify and reproduce vulnerabilities, then partner with engineers to remediate them through a structured process.
• Test AI-specific attack surfaces, including prompt injection, tool misuse, data leakage, permission escalation, memory poisoning, and unsafe agent behavior.
• Leverage agents, automation, and security tooling to continuously probe systems and surface weaknesses.
• Triage findings based on exploitability, user impact, and business risk to prioritize remediation efforts.
• Strengthen authentication, authorization, identity, secrets management, data boundaries, and infrastructure security.
• Build lightweight monitoring, testing, and defensive systems that evolve alongside the product.
• Help establish pragmatic security standards and development practices without introducing unnecessary bureaucracy.

Qualifications and Requirements:

• Strong experience in application, product, cloud, or offensive security.
• Hands-on ability to identify, exploit, debug, and remediate vulnerabilities.
• Solid understanding of modern web architecture, APIs, authentication/authorization, cloud infrastructure, and data security.
• Strong engineering fundamentals and coding ability to build security tooling, automation, and fixes.
• Familiarity with AI/LLM security risks and a strong interest in securing agentic systems.
• Comfortable operating in a fast-moving, zero-to-one environment where security practices evolve alongside the product.
• Pragmatic judgment: knows established security best practices, applies them effectively, and knows when deeper investigation is warranted.
• Experience with red-teaming LLM or agent systems, building automated security testing infrastructure, or working on products involving sensitive identity, memory, permissions, or user data is highly valuable.
• Located in Latin America.
• Fluent in English.