Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 3 days ago

Senior AI Security Researcher

activefence/d5.00543 open roles

Where
Ramat Gan, IL
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior AI Security Researcheractivefence/d5.005 · Ramat Gan, IL

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on activefence/d5.005's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. activefence/d5.005 postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: first seen 3 days ago

activefence/d5.005 median: 1 days open

The posting

Alice secures AI apps, agents and models from build to production. Enterprises already run agents that talk to their customers, read their email and call their internal tools. Every conversation and every connection can be a way in for an attacker, or the point where an agent goes rogue. You find out how those agents break, on the stacks enterprises actually use, before they cause harm.

You will be the first AI security researcher on the product team, reporting to the Director of GenAI Products. Your research becomes guardrails and red teaming tests in the Alice platform, proof customers can act on, and research our marketing team publishes. It also feeds the threat intelligence we deliver. You choose the questions, guided by what enterprises are deploying right now and by the wider research Alice does with the foundation model labs.

Key Responsibilities

  • Research emerging agent risks. Study how agents fail when they talk to users, read untrusted content, call tools, share memory, act autonomously and work with other agents. That covers indirect prompt injection, tool and MCP misuse, data exfiltration, memory poisoning, privilege escalation across agents and unsafe autonomous actions.
  • Test and prove. Build the environments and experiments that show whether a risk is real, how often it happens and under which conditions. Work on the stacks enterprises use: agent frameworks, MCP servers, workflow tools and AI gateways. Build the sandboxes, detectors and graders that catch failures, and turn each one into a regression test anyone can rerun. Measure how often and how severely agents misbehave, and how that shifts across models, tools and harnesses. Report results with the numbers behind them, so others can rerun and trust them.
  • Shape the platform. Work with the product team to turn your findings into new guardrails and red-team tests in the Alice platform.
  • Inform go-to-market and threat intelligence. Share findings and evidence with sales, marketing and Alice's threat intelligence teams, so they can explain new risks to customers with proof behind them.
  • Publish. Turn research into technical posts, reports and talks with the marketing team, written to hold up with security practitioners, buyers and analysts. We support conference submissions such as Black Hat and DEF CON, including time to prepare and travel to present. Vulnerabilities you find go through responsible disclosure and get CVEs where they qualify.
  • Collaborate. Work with Alice's large research organization, which partners with leading hyperscalers and foundation model labs. Follow new papers, disclosures and exploits, and decide which ones matter for enterprises deploying agents.

Success Looks Like

90 days in, you have published at least one research piece on enterprise agent risks. Its findings have shaped new protections in the Alice platform.

Requirements

  • 4+ years in security research, offensive security, penetration testing or vulnerability research.
  • Hands-on experience with direct and indirect prompt injection, jailbreaks, data exfiltration and tool misuse against real systems.
  • Strong Python. You build your own tooling and test environments.
  • Working knowledge of how agents are built: tool calling, MCP, retrieval, memory and multi-agent orchestration, with hands-on use of at least one agent framework.
  • Familiarity with AI security frameworks (OWASP Top 10 for LLM Applications and for Agentic Applications, MITRE ATLAS) and with public agent safety and security benchmarks.
  • Experiment discipline: reproducible setups, controls, and enough runs to trust a result.
  • Clear writing and presentation: test results the product team can act on, and research that marketing can publish.
  • Fluent English, written and spoken.

Nice to Have

  • Published research, CVEs, conference talks, or a bug bounty or CTF record in AI or application security.
  • Experience researching AI safety failures, such as harmful outputs or unsafe autonomous actions.
  • A background in adversarial machine learning.
  • Experience building or evaluating detection systems that use AI.
  • Experience working with product and engineering teams to turn research into shipped features.

About Alice

Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines.

In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection.

Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms.

If you're creative and driven to secure the future of AI, we want to hear from you!

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against activefence/d5.005's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on activefence/d5.005's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    activefence/d5.005's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.