- Redmond, Washington, United States +1 more
- Principal
- $143K–$275K per year
- 3+ years
Design and execute end-to-end attacks against agentic systems, AI-enabled security products, orchestration frameworks, tools, plugins, connectors, identities, permissions and isolation boundaries.
Locations (2)
- Redmond, Washington, United States
- United States
Compensation
Research Sciences IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
Responsibilities
- Design and execute end-to-end attacks against agentic systems, AI-enabled security products, orchestration frameworks, tools, plugins, connectors, identities, permissions and isolation boundaries.
- Investigate indirect prompt injection, unsafe tool use, scope violations, privilege escalation, confused-deputy behavior, secret exposure, sandbox escape, cross-agent manipulation and tampering with human oversight.
- Build realistic attack chains using attacker-controlled telemetry, alerts, code, web content and other inputs that agents encounter in production workflows.