Security Engineer AI Trainer (GenAI Applications)
About the role
We’re looking for experienced security engineers to evaluate how effectively static analysis tools detect vulnerabilities in GenAI applications. You’ll build small, runnable agent and RAG codebases containing realistic examples of Sensitive Information Disclosure and Excessive Agency, along with fixed and near miss versions. You’ll then trace, annotate, test, and explain each finding.
What you'll do
- Build runnable agent/RAG repositories with code reachable Sensitive Information Disclosure or Excessive Agency vulnerabilities across tool calling, memory, and MCP.
- Create vulnerable, fixed, and hard negative variants with minimal security relevant differences.
- Trace and annotate assets, data/action paths, controls, root causes, severity, and residual risk.
- Define authorization contexts and write deterministic tests validating vulnerable, fixed, and negative behavior.
- Recommend security controls and participate in calibration and peer review.
Requirements
- 5+ years in application/product security or security focused software engineering, including secure code review.
- Experience with source to sink analysis, taint analysis, SAST, CodeQL, or Semgrep.
- Hands on experience building LLM agents or RAG systems using frameworks such as LangChain, LlamaIndex, OpenAI/Anthropic SDKs, or MCP.
- Strong authorization knowledge, including actors, trust boundaries, tenants, OAuth, IAM, identity, permitted data/actions, purposes, recipients, and document level access control.
- Production coding experience in Python and/or TypeScript, with strong judgment in distinguishing genuine SID/EA findings from non findings.
- Experience with OWASP LLM security risks, MCP, threat modeling, or security evaluation is a plus.
About Turing
Turing is an AI company based in San Francisco that works with the world's leading AI labs to make their models better at reasoning, coding, languages and more. It also helps businesses build real AI systems, and it works with talent from over 100 countries.
AI Alerts shares third-party job opportunities for informational purposes only. We are not the employer and are not involved in the hiring process. Always verify the company and role through official channels before applying, and never pay to apply, train, onboard, process documents, or secure a job offer. Legitimate employers do not ask applicants for money. Read our Terms to learn more.