AI Security Engineer / Offensive Security Engineer - Technology

At Truelogic we are a leading provider of nearshore staff augmentation services headquartered in New York. For over two decades, we’ve been delivering top-tier technology solutions to companies of all sizes, from innovative startups to industry leaders, helping them achieve their digital transformation goals.

Our team of 600+ highly skilled tech professionals, based in Latin America, drives digital disruption by partnering with U.S. companies on their most impactful projects. Whether collaborating with Fortune 500 giants or scaling startups, we deliver results that make a difference.

By applying for this position, you’re taking the first step in joining a dynamic team that values your expertise and aspirations. We aim to align your skills with opportunities that foster exceptional career growth and success while contributing to transformative projects that shape the future.

A prominent executive networking organization focused on driving business transformation through high-level strategic discourse.

Our client is looking for a highly hands-on security engineer to continuously attack, test, and strengthen their AI product and infrastructure. This person should think like a white-hat hacker: spend meaningful time trying to break the system, identify vulnerabilities across agents, APIs, identity, memory, permissions, data flows, and infrastructure, then work directly with engineering to understand, prioritize, and fix what they find.

The candidate should have a strong grounding in modern application and cloud security best practices without feeling the need to reinvent the wheel, and be comfortable using automation and AI agents to accelerate security testing, vulnerability discovery, triage, and remediation. Day to day, this could mean orchestrating agents to probe the system, investigating suspicious behavior or failure modes, reproducing exploits, hardening production systems, and gradually building an iterative defensive security layer around the product.

The ideal person combines an offensive security mindset with strong engineering judgment: someone who enjoys breaking systems as much as fixing them, can distinguish theoretical risk from meaningful product risk, and can help make security an ongoing engineering practice rather than a periodic audit.

• →

  Continuously red-team the company's product, infrastructure, APIs, and agentic systems.

• →

  Identify and reproduce vulnerabilities, then partner with engineers through remediation.

• →

  Test AI-specific attack surfaces including prompt injection, tool misuse, data leakage, permission escalation, memory poisoning, and unsafe agent behavior.

• →

  Use agents, automation, and security tooling to continuously probe systems and surface weaknesses.

• →

  Triage findings based on exploitability, user impact, and business risk.

• →

  Strengthen authentication, authorization, identity, secrets management, data boundaries, and infrastructure security.

• →

  Build lightweight monitoring, testing, and defensive systems that improve continuously as the product evolves.

• →

  Help establish pragmatic security standards and development practices without introducing unnecessary process.

• Strong experience in application, product, cloud, or offensive security.

• Hands-on ability to identify, exploit, debug, and remediate vulnerabilities.

• Solid understanding of modern web architecture, APIs, authentication/authorization,

  cloud infrastructure, and data security.

• Strong engineering fundamentals and enough coding ability to build security tooling,

  automation, and fixes.

• Familiarity with AI/LLM security risks and strong interest in securing agentic systems.

• Comfortable operating in a fast-moving, zero-to-one environment where the security

  model is evolving alongside the product.

• Pragmatic judgment: knows established security best practices, applies them well, and

  knows when deeper investigation is actually warranted.

• Experience red-teaming LLM or agent systems, building automated security testing infrastructure, or working on products involving sensitive identity, memory, permissions, or user data would be particularly valuable.

• Located in Latin America.

• Fluent English level.

• A Culture That Values You: We prioritize well-being and work-life balance, offering engagement activities and fostering dynamic teams to ensure you thrive both personally and professionally.

• Diverse, Global Network: Connect with over 600 professionals in 25+ countries, expand your network, and collaborate with a multicultural team from Latin America.

• Team Up with Skilled Professionals: Join forces with senior talent. All of our team members are seasoned experts, ensuring you're working with the best in your field.

Apply now!