Senior SecOps Engineer

We are building a unified, scalable AI security testing and benchmarking platform integrated within the Hyperspace ecosystem. This initiative unifies diverse security services behind a single, intelligent agent that automatically routes requests to the appropriate capability, simplifying workflows for developers and AppSec teams. The project also involves evaluating cost-effective open-weight LLMs, benchmarking various AI security tools, and seamlessly connecting capabilities across the software development lifecycle (SDLC) using the Model Context Protocol (MCP) and agentic approaches.

Responsibilities

• Design and implement a unified AI security testing and benchmarking platform within the Hyperspace ecosystem
• Build an intelligent agent capable of automatically routing requests to the appropriate security service
• Evaluate cost-effective open-weight LLMs for security use cases
• Benchmark various AI security tools to assess performance and effectiveness
• Connect security capabilities across the software development lifecycle using MCP and agentic approaches
• Collaborate with developers and AppSec teams to simplify security workflows
• Conduct dynamic and static testing to identify vulnerabilities
• Apply application security fundamentals to detect and address OWASP Top 10 vulnerabilities across Web Application, MCP, and LLM contexts

Requirements

• 5+ years of experience in security engineering and development
• Understanding of AI security concepts, including MCP, LLM, and RAG
• Knowledge of dynamic and static testing methodologies
• Background in application security fundamentals, including OWASP Top 10 vulnerabilities across Web Application, MCP, and LLM domains
• English proficiency at B2 level or higher

Nice to Have

• Familiarity with cross-language code, with the capability to read, understand, and make small patches when needed
• Interest in AI for security and security for AI topics, along with skills in clear technical writing and reporting
• Capability to communicate effectively across engineering, security, and stakeholder teams