GenAI Security - Principal Security Research Engineer @Elastic

Overview

Elastic, the Search AI Company, specializes in enabling real-time search and insights across all data. The Principal Security Research Engineer will be part of the Threat Research and Detection Engineering (TRaDE) team, focusing on enhancing detection capabilities in AI security.

Key Responsibilities

• Design and execute security tests for GenAI applications and LLM-backed products, focusing on various attack types such as prompt injection and sensitive data extraction.
• Investigate new multi-domain threat vectors and develop security protections based on emerging risks.
• Create and present findings to enhance team knowledge and community awareness.
• Utilize AI-assisted techniques to improve detection engineering processes.

Requirements

• Experience with endpoint data and detection engineering pitfalls in GenAI.
• Hands-on experience using LLM tools for security testing and research.
• Familiarity with AI-assisted development tools and modern AI/ML frameworks.
• Ability to transition between different projects based on business needs.
• Proven ability to present findings to technical audiences.
• Experience with Elastic Security and proficiency in writing or validating detections using query languages (e.g., EQL, KQL, ESQL) is a plus.
• Experience running penetration tests or vulnerability assessments on web applications/APIs, with knowledge of OWASP Top 10 and ability to communicate risks clearly.

Benefits

• Competitive pay based on performance and skills.
• Health coverage for you and your family in many locations.
• Flexible work schedules and locations.
• Generous vacation policy.
• Financial support for donations and volunteer projects.
• Minimum of 16 weeks parental leave.

Location

Remote – United States

How to Apply

To apply, visit the company careers page.

Deadline

Not stated.