Principal AI Offensive Security Engineer

About the role

The Opportunity At Ally, you get a startup feel, but experience the benefits of a company that has worked out the kinks and is fulfilling its purpose. We are always evolving and see that as a good thing. From owning our work to seeing its impact in the real world, our team is relentless in finding new ways technology can help make experiences better and help people.

Responsibilities

• Pen test AI, LLM-powered systems, machine learning platforms, APIs, and cloud environments.
• Develop custom tools and scripts to automate the testing of AI and automate pen testing in general.
• Assess security controls surrounding retrieval-augmented generation, agentic workflows, tool integrations, etc.
• Work with cross-functional teams to report identified vulnerabilities.
• Produce professional grade reports based on the penetration tests you perform.
• Conduct scoping calls with internal clients to determine penetration test needs.
• Train junior engineers may be required.

Requirements

• Minimum of 7+ years of relevant experience.
• Bachelor’s Degree in relevant field(s) of study or equivalent.
• Minimum of 2 years of experience in cyber security.
• Minimum of 3 years of experience in offensive security.
• Minimum of 1-2 years of experience in offensive security with an AI focus.

Qualifications

• Excellent communication and presentation skills, with the ability to effectively convey complex concepts to technical and non-technical audiences.
• Strong analytical and problem-solving abilities.
• Ability to work independently and collaboratively in a fast-paced environment.

Skills

• Relevant certifications or ability to obtain within a year: OSCP, OSEP, OSAI, CRTO, CRTL, CPTS, CAPE, COAE, etc.
• Experience performing adversary emulations.
• Experience working with financial institutions.
• Experience performing physical penetration tests.
• Experience performing social engineering with AI.
• Experience with PoC development or having CVEs published.

Pay

Base Pay Range: $110000 - $180000 USD

Schedule

Work Schedule: Ally designates roles as (1) fully on-site, (2) hybrid, or (3) fully remote. Hybrid roles are generally expected to be in the office a certain number of days per week as indicated by your manager. Your hiring manager will discuss this role's specific work requirements with you during the hiring process. All work requirements are subject to change at any time based on leader discretion and/or business need.

Benefits

To view more detailed information about Ally’s Total Rewards, please visit this link: https://www.ally.com/content/dam/pdf/corporate/ally-total-rewards-snapshot.pdf