GenAI Security Evaluation Engineer at Turing

GenAI Security Evaluation Engineer | Varies | Remote | Contractor

Turing is hiring security engineers to evaluate how effectively static analysis tools detect vulnerabilities in GenAI applications. You'll build small, runnable agent and RAG codebases containing realistic examples of Sensitive Information Disclosure and Excessive Agency, then trace, annotate, test, and explain each finding.

What You'll Do

• Build runnable agent and RAG repositories with code-reachable Sensitive Information Disclosure or Excessive Agency vulnerabilities across tool calling, memory, and MCP.
• Create vulnerable, fixed, and hard-negative variants with minimal security-relevant differences.
• Trace and annotate assets, data and action paths, controls, root causes, severity, and residual risk.
• Define authorization contexts and write deterministic tests validating vulnerable, fixed, and negative behavior.
• Recommend security controls and participate in calibration and peer review.

Requirements

• 3+ years in application or product security, or security-focused software engineering, including secure code review.
• Experience with source-to-sink analysis, taint analysis, SAST, CodeQL, or Semgrep.
• Hands-on experience building LLM agents or RAG systems using frameworks such as LangChain, LlamaIndex, OpenAI or Anthropic SDKs, or MCP.
• Strong authorization knowledge, including actors, trust boundaries, tenants, OAuth, IAM, identity, permitted data and actions, purposes, recipients, and document-level access control.
• Production coding experience in Python and/or TypeScript, with strong judgment distinguishing genuine Sensitive Information Disclosure and Excessive Agency findings from non-findings.
• Experience with OWASP LLM security risks, MCP, threat modeling, or security evaluation is a plus.

Schedule and Engagement

• Contractor engagement of up to 2 weeks.
• At least 4 hours per day, minimum 20 hours per week, including 4 hours of overlap with Pacific Time.
• Location: Remote.

Hiring Process

• AI interview (~25 minutes)
• Resume and overall application review
• Offer