Senior Security Researcher - Red Team (Contract)

Location: Ukraine — Remote

Company

hirify.global is a cybersecurity product company providing continuous identity verification across voice, video, and digital interactions, with a focus on fraud prevention, deepfake detection, and AI-enabled trust systems.

What you will do

• Design and execute red team operations against GenAI systems, LLM pipelines, RAG architectures, autonomous agents, APIs, SaaS products, and cloud environments.
• Conduct adversarial testing involving prompt injection, jailbreaking, model extraction, training-data poisoning, data leakage, inference abuse, and unauthorized output manipulation.
• Use deepfake generation, voice synthesis, and audio/visual spoofing techniques to test voice authentication and deepfake detection systems.
• Perform penetration tests, architecture reviews, security code reviews, and threat modeling across web applications, APIs, SaaS products, and AWS/GCP environments.
• Build Python-based automation for offensive security workflows, testing, compliance checks, alerting, and reporting.
• Partner with SecOps, security engineering, product, and AI/ML stakeholders to improve detections, response workflows, and remediation.

Requirements

• 3+ years of hands-on penetration testing and red team experience across SaaS applications, cloud infrastructure, APIs, and web applications.
• Demonstrable experience attacking GenAI or LLM-based systems, including prompt injection, jailbreaking, model extraction, or adversarial input generation.
• Hands-on experience with deepfake tools, voice synthesis, or audio/visual spoofing technologies.
• Strong proficiency with offensive security tools such as Burp Suite, OWASP ZAP, Nmap, Metasploit, or equivalent frameworks.
• Experience with SAST and DAST tools, CI/CD integration, Python or another scripting language, and AI-focused security frameworks.
• Knowledge of cloud, container, and API security, plus standards including ISO 27001/27002, NIST, CIS, PCI DSS, OWASP, and SOC 2.

Nice to have

• Software development or secure architecture experience.
• Research or practitioner experience in adversarial machine learning, LLM security, or voice and audio deepfake detection.
• Certifications such as OSCP, GPEN, GWAPT, GXPN, or CEH.
• Experience in voice biometrics, AI security, fraud prevention, or other high-risk product environments.

Culture & Benefits

• Remote-first work environment.
• Competitive compensation with equity for employees.
• Unlimited paid time off.
• Work focused on offensive security, GenAI, deepfake defense, cloud security, and voice identity protection.