The ad says“Demonstrable hands-on interest in AI. You have built or experimented with LLMs, agents, RAG or related systems through professional work, independent research, open-source contributions or substantial personal projects”
The ad says“Experience with managed LLM platforms (e.g. Bedrock)”
The ad says“Strong hands-on cybersecurity experience. You have worked directly in one or more areas such as SOC operations, incident response, threat detection, vulnerability research, offensive security or security engineering”
The ad says“Prior offensive security experience (pentesting, red teaming, vulnerability research) that transfers to the AI/LLM domain. Background in SOC operations, MDR, or incident response”
The ad says“Demonstrable hands-on interest in AI. You have built or experimented with LLMs, agents, RAG or related systems through professional work, independent research, open-source contributions or substantial personal projects”
The ad says“Strong hands-on cybersecurity experience. You have worked directly in one or more areas such as SOC operations, incident response, threat detection, vulnerability research, offensive security or security engineering”
The ad says“Prior offensive security experience (pentesting, red teaming, vulnerability research) that transfers to the AI/LLM domain. Background in SOC operations, MDR, or incident response”
The ad says“Demonstrable hands-on interest in AI. You have built or experimented with LLMs, agents, RAG or related systems through professional work, independent research, open-source contributions or substantial personal projects”
The ad says“Prior offensive security experience (pentesting, red teaming, vulnerability research) that transfers to the AI/LLM domain. Background in SOC operations, MDR, or incident response”
The ad says“Strong hands-on cybersecurity experience. You have worked directly in one or more areas such as SOC operations, incident response, threat detection, vulnerability research, offensive security or security engineering”
The ad says“Prior offensive security experience (pentesting, red teaming, vulnerability research) that transfers to the AI/LLM domain. Background in SOC operations, MDR, or incident response”
The ad says“Strong hands-on cybersecurity experience. You have worked directly in one or more areas such as SOC operations, incident response, threat detection, vulnerability research, offensive security or security engineering”
The ad says“Strong hands-on cybersecurity experience. You have worked directly in one or more areas such as SOC operations, incident response, threat detection, vulnerability research, offensive security or security engineering”
AI is changing both the scale of cyber threats and how defenders operate
Eye Security wants to use modern AI and agentic systems to make SecOps more effective and solve cybersecurity problems across our customer base that cannot scale through manual work alone
We are hiring a Staff AI Security Engineer to champion AI security as a discipline at Eye Security, independently explore these opportunities, build working prototypes and help turn successful experiments into production capabilities
Initial focus areas include Agentic SOC, AI-driven vulnerability hunting and the security of our own AI systems
Expand Agentic SOC capabilities. Work directly with SecOps analysts to identify high-value investigation, triage and response workflows that can be improved through AI. Prototype agents, evaluate them against real operational cases and measure their effect on analyst quality, speed and workload
Develop Agentic Workflows at scale. For example, research and prototype agentic systems that help Eye identify relevant vulnerabilities, validate exposure and exploitability, develop detection logic and prioritise action across customer environments
Translate prototypes into customer-facing capability & tools. Actively explore with customers and partners the possibility of turning a prototype into a shippable tool, something that solves a real problem, like browser extensions (we have three to date), agentic skills, and other tools
Help secure Eye’s AI systems. Assess agentic, LLM and RAG systems for realistic risks such as prompt injection, unsafe tool use, data leakage and supply-chain exposure, and turn findings into practical engineering controls
Work closely with the Principals in your team. You will be part of a team that has hands-on AI expertise and emphasizes cooperation and mutual exchange
Work across the organization. Work with internal teams to get findings and mitigations into shipped systems, and understand where AI-related incidents and threats are already showing up operationally
Exposure: write up technical research for our Eye Research blog and represent Eye Security externally through talks and technical content on AI security
Track the threat landscape. Stay ahead of emerging attack techniques against LLM and agentic systems, and emerging guidance (OWASP, NIST, ENISA) on how to defend against them, translating that into something Eye Security can act on
In your first 6–12 months
Write & execute a 100-day plan with input from the Research & Innovation team and the CTO
Work together towards an Agentic SOC prototype and/or AI-driven CVE hunting capability that demonstrates a measurable improvement in analyst efficiency or investigation quality
Complete a security assessment of at least one production AI system and help implement the resulting controls. Establish a working definition of “AI security review” at Eye Security
Publish research or tooling when it creates meaningful value for customers or the wider security community
Benefits
Make an impact: Join a state-of-the-art cyber security and insurtech organisation where you get to build, scale, and work with world-class experts.
Culture first: From our annual “Eye-cation” to quarterly company-wide events and monthly team gatherings, we work, grow, and celebrate TOGETHER.
Time of recharge: We’re generous with our time off, which includes country-specific holidays, floating holidays to celebrate what matters to you, volunteering days, and wellness/mental health days.
Flexible working arrangements: Working in a hybrid setup from one of our offices, we give everyone the freedom to manage their own schedule with flexible working hours.
Growth & learning opportunities: Opportunities for personal growth include working on challenging projects, participating in peer learning events, and building individual growth plans. You benefit from a complimentary learning budget, conferences, networking events, and time off for learning and development.
Preferred experience
Working proficiency in English. Dutch or German is a plus, not a requirement
Demonstrable hands-on interest in AI. You have built or experimented with LLMs, agents, RAG or related systems through professional work, independent research, open-source contributions or substantial personal projects
Staff-level technical judgment. You can independently identify valuable research questions, decide what is worth pursuing, communicate your reasoning and influence engineers and security specialists without formal authority. Comfort in building things yourself. You can go from a research question to a working prototype largely independently
Strong hands-on cybersecurity experience. You have worked directly in one or more areas such as SOC operations, incident response, threat detection, vulnerability research, offensive security or security engineering
Prior offensive security experience (pentesting, red teaming, vulnerability research) that transfers to the AI/LLM domain. Background in SOC operations, MDR, or incident response
Experience with managed LLM platforms (e.g. Bedrock)
Contributions to the AI security community: CTF write-ups, published jailbreaks or mitigations, OWASP LLM Top 10 or MITRE ATLAS involvement, conference talks