Skip to content

Open nowPosted 4 hours agoWe saw it 57 min after it went up

Senior Security Researcher, Voice Agent Red Team

hamming ai5 open roles

Where
SF
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Security Researcher, Voice Agent Red Teamhamming ai · SF
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on hamming ai's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 4 hours ago

The posting

ABOUT HAMMING

Hamming is the security layer for voice and chat agents. Banks, health systems, and other enterprises are putting agents on phone lines where anyone can reach them, and where the agent can verify identity, read an account, and act. We attack those agents before criminals do, with the owner's permission, show what they fall for, and keep every fix tested on every release.

We are one of the fastest engineering teams in the world. We prod deploy 4x / day.

Devin Case Study https://devin.ai/customers/hamming

Ranked #1 Eng team https://www.linkedin.com/posts/andrew-d-churchill_sumanyu-ceo-at-hamming-ai-had-20x-the-output-activity-7354564854029901824-jSDP?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAh-eI0Bl3EbQhXGlnjcZ4TbyeByvoh32hg

OpenAI Dev Day 100billion token list https://www.linkedin.com/posts/sumanyusharma_openaidevday-activity-7381718141455859712-OPhA?utm_source=share&utm_medium=member_desktop&rcm=ACoAAAh-eI0Bl3EbQhXGlnjcZ4TbyeByvoh32hg

THE ROLE

You run authorized assessments of production voice and chat agents at banks, health systems, and other enterprises. You scope the engagement with the owner, run it through a harness that makes thousands of calls, decide which results are security failures with a real consequence, and write the finding the owner fixes the same day. Then you rerun it, because a fix is a claim until the same attack fails again. Findings become permanent tests; the work you can share goes out through responsible disclosure and on stage.

WHAT YOU'LL DO

- Own the assessment. Threat model, scope, test identities, stopping conditions, and the evidence a finding needs.

- Follow the whole path. Conversation, retrieved content, identity checks, and tool permissions, to the point where the agent crosses a line.

- Work carefully in production. Approved scenarios, controlled data, the customer informed, a hard stop at the agreed limit.

- Prove what's exploitable. Preconditions, reproduction, impact, and the fix, with severity stated honestly.

- Verify the remediation. Turn the case into regression coverage, and teach the harness what you found by hand.

WHAT YOU'LL BRING

- 5+ years in offensive security, with authorized assessments of production applications, APIs, or agent systems.

- Hands-on AI attack work: prompt injection, jailbreak chains, tool and function-call abuse, data exfiltration through model outputs.

- Application security fundamentals: authentication and authorization bypass, injection, session and identity handling.

- Reports a developer can reproduce and a CISO can defend, and Python or TypeScript to make your work repeatable.

NICE TO HAVE

- Assessments of voice or telephony systems

- Engagements with banks or health systems

- Published research, a CVE, or a conference talk

HOW WE WORK

We start with the customer problem, ship daily, and let evidence decide what comes next. Use AI tools to move faster and own the result. Direct, low ego, serious work.

BENEFITS AND PERKS

- Competitive salary and meaningful equity

- Health, dental, and vision coverage

- Every frontier AI tool, fully paid, from day one

- Conferences and events we sponsor

- Flexible PTO

- Offices in San Francisco and Austin; remote in the United States for most roles

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against hamming ai's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on hamming ai's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    hamming ai's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.