Please mention DailyRemote when applying
See how much of this job your resume covers, and what’s missing.
Want a recruiter to go through it line by line?
Get professional reviewOne click makes a copy of your resume for this role, scores it against the posting, and proposes edits line by line. Your default resume is never changed.
Upload your resume and we draft a letter for this exact role, tailored to what it asks for.
You will conduct authorized security assessments of production voice and chat agents to identify vulnerabilities and verify remediation effectiveness. This involves threat modeling, executing large-scale attack simulations, and documenting findings to ensure robust security fixes.
Hamming is the security layer for voice and chat agents. Banks, health systems, and other enterprises are putting agents on phone lines where anyone can reach them, and where the agent can verify identity, read an account, and act. We attack those agents before criminals do, with the owner's permission, show what they fall for, and keep every fix tested on every release.
We are one of the fastest engineering teams in the world. We prod deploy 4x / day.
OpenAI Dev Day 100billion token list
You run authorized assessments of production voice and chat agents at banks, health systems, and other enterprises. You scope the engagement with the owner, run it through a harness that makes thousands of calls, decide which results are security failures with a real consequence, and write the finding the owner fixes the same day. Then you rerun it, because a fix is a claim until the same attack fails again. Findings become permanent tests; the work you can share goes out through responsible disclosure and on stage.
Own the assessment. Threat model, scope, test identities, stopping conditions, and the evidence a finding needs.
Follow the whole path. Conversation, retrieved content, identity checks, and tool permissions, to the point where the agent crosses a line.
Work carefully in production. Approved scenarios, controlled data, the customer informed, a hard stop at the agreed limit.
Prove what's exploitable. Preconditions, reproduction, impact, and the fix, with severity stated honestly.
Verify the remediation. Turn the case into regression coverage, and teach the harness what you found by hand.
5+ years in offensive security, with authorized assessments of production applications, APIs, or agent systems.
Hands-on AI attack work: prompt injection, jailbreak chains, tool and function-call abuse, data exfiltration through model outputs.
Application security fundamentals: authentication and authorization bypass, injection, session and identity handling.
Reports a developer can reproduce and a CISO can defend, and Python or TypeScript to make your work repeatable.
Assessments of voice or telephony systems
Engagements with banks or health systems
Published research, a CVE, or a conference talk
We start with the customer problem, ship daily, and let evidence decide what comes next. Use AI tools to move faster and own the result. Direct, low ego, serious work.
Competitive salary and meaningful equity
Health, dental, and vision coverage
Every frontier AI tool, fully paid, from day one
Conferences and events we sponsor
Flexible PTO
Offices in San Francisco and Austin; remote in the United States for most roles
Stop the endless job search. Our AI finds and applies to the best jobs for you.
Featuring 220,809+ Jobs in Software Development
Answer easy questions
220,809+ jobs across 15+ categories
Get your best job matches
Only hand-screened, legit jobs
Find a remote job faster
No ads, scams, or junk
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”
— Sarah J.
·
Marketing Manager
★★★★★
Verified
