Remote opportunity at
PindropSenior Security Researcher - Red Team (Contract)
Pindrop is a cybersecurity company that provides continuous identity verification across voice, video, and digital interactions through its unified trust platform. The organization is seeking a…
Career Tools
About This Role
Pindrop is a cybersecurity company that provides continuous identity verification across voice, video, and digital interactions through its unified trust platform. The organization is seeking a Senior Security Researcher to join its red team on a contract basis. This remote position involves uncovering vulnerabilities across cloud infrastructure, software products, and artificial intelligence systems to reinforce defenses against emerging threats. In this capacity, the professional will carry out offensive security testing…
Job Description
Pindrop is a cybersecurity company that provides continuous identity verification across voice, video, and digital interactions through its unified trust platform. The organization is seeking a Senior Security Researcher to join its red team on a contract basis. This remote position involves uncovering vulnerabilities across cloud infrastructure, software products, and artificial intelligence systems to reinforce defenses against emerging threats.
In this capacity, the professional will carry out offensive security testing against large language models, retrieval-augmented generation architectures, SaaS offerings, and APIs. Responsibilities include simulating complex attack scenarios, evaluating prompt injection vulnerabilities, leveraging voice synthesis and spoofing methods to test detection limits, and building automated security workflows. The role suits an independent, adaptable adversarial thinker with a strong curiosity for breaking system assumptions and experience testing artificial intelligence architectures.
Contractors will collaborate closely with security operations and engineering units to translate testing outcomes into actionable defense improvements. The ideal candidate brings a blend of offensive security testing expertise and practical exposure to generative artificial intelligence threats. Pindrop operates with a remote-first culture and contracts this role through Alcor BPO, offering an opportunity to contribute directly to the evolution of voice security and fraud prevention systems.
Responsibilities
- Plan and conduct red team exercises targeting generative AI systems, API endpoints, cloud environments, and SaaS applications
- Simulate adversarial tactics such as prompt injection, jailbreaking, model extraction, and data leakage
- Utilize voice synthesis and spoofing techniques to test the robustness of voice authentication and deepfake detection features
- Construct comprehensive attack chains combining AI vulnerabilities with application and infrastructure weaknesses
- Execute full-scope penetration tests and participate in bug bounty programs across AWS, GCP, and web applications
- Perform threat modeling, architecture evaluations, and security code reviews focusing on artificial intelligence components
- Develop automation scripts using Python or alternative languages for offensive security workflows and testing
- Collaborate with security engineering and operations to enhance detection rules and remediation strategies
- Monitor advancements in generative artificial intelligence security research and threat intelligence updates
Requirements
- At least three years of hands-on red team and penetration testing experience covering cloud infrastructure, APIs, and SaaS platforms
- Proven background in attacking large language models or generative AI systems through prompt injection, jailbreaking, or model extraction
- Practical experience using deepfake tooling, audio spoofing, or voice synthesis in research or offensive scenarios
- Proficiency with standard offensive security tools including Metasploit, Nmap, Cobalt Strike, Burp Suite, and OWASP ZAP
- Experience operating and configuring static and dynamic application security testing tools within CI/CD pipelines
- Demonstrated scripting capability in at least one programming language, with a strong preference for Python
- Familiarity with adversarial machine learning frameworks such as PyRIT or Garak
- Working knowledge of cloud security, container security, API security, and frameworks like NIST, CIS, SOC 2, and ISO standards
Qualifications
- Prior software development or secure architecture background spanning multiple programming languages
- Published research or deep practitioner history in adversarial machine learning, LLM security, or audio deepfake detection
- Possession of relevant certifications such as OSCP, GPEN, GWAPT, GXPN, or CEH
- Background working in voice biometrics, fraud prevention, artificial intelligence security, or similar high-risk environments
Core Skills
Benefits
- Competitive compensation package
- Equity options
- Unlimited paid time off
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, the source posting explicitly states that the role is remote with a remote-first culture.
What is the employment type?
This is a contract position that is contracted through Alcor BPO.
What salary does Pindrop offer for this role?
The posting does not specify a salary range.
What are the primary technical requirements?
Candidates must have at least three years of penetration testing and red team experience, practical exposure to attacking generative AI systems, proficiency with offensive security tools, and strong scripting skills in Python or a similar language.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.