AI Red Teamer / Penetration Tester (Independent Contractor)
Important: Contractor Eligibility & Location
This is an independent contractor role focused on the cutting edge of AI security. Before applying, please review the specific requirements below to ensure alignment with our engagement model.
This role is exclusively open to independent contractors residing in our list of accepted countries and locations. We are unable to process applications from unlisted regions.
For US applicants: This is a 1099 independent contractor engagement. It is not compatible with F-1 OPT, STEM OPT, or any visa status that necessitates W-2 employment, guaranteed hours, or employer sponsorship. We cannot provide offer letters or employment verification for this role.
Applicants will be required to verify their identity and confirm valid documentation to work as an independent contractor in their country of residence.
Your Mission: Secure the Future of AI
Step into the exciting and critical field of AI security! As an AI Red Teamer, you will be at the forefront, probing and stress-testing AI-powered applications, APIs, and their supporting infrastructure. Your mission is to proactively uncover vulnerabilities and weaknesses before malicious actors can exploit them, ultimately hardening AI systems against real-world adversaries.
This role offers a unique opportunity to apply your offensive security expertise to groundbreaking technology, ensuring AI models and infrastructure can withstand sophisticated attacks.
What You'll Be Doing
Your day-to-day will involve hands-on security assessments and penetration testing, with a keen focus on the emerging AI/ML threat landscape:
Execute comprehensive penetration tests against AI applications, APIs, and underlying infrastructure, covering all phases from reconnaissance through exploitation and post-exploitation.
Actively hunt for AI/ML-specific attack surfaces, including prompt injection, jailbreaks, model manipulation, data poisoning, adversarial inputs, and data exfiltration vectors.
Conduct web application, network, and API security assessments utilizing industry-standard methodologies such as OWASP Top 10, PTES, and MITRE ATT&CK.
Document all findings in clear, structured, and actionable reports, complete with severity ratings, precise reproduction steps, and practical remediation recommendations.
The End Goal: To deliver AI systems that are robust and resilient, with vulnerabilities identified and remediated before they ever reach production. This is AI red-teaming in action: Probe → Exploit → Document with Reproductions → Feed Findings into Hardening Cycles → Build Models & Infrastructure That Withstand Real-World Attacks.
Who You Are & What You'll Bring
We're seeking sharp, experienced offensive security professionals who are eager to apply their skills to the cutting edge of artificial intelligence. If you thrive on uncovering hidden weaknesses and crafting meticulous solutions, you'll feel right at home.
Experience: 3+ years of professional penetration testing or offensive security experience covering web applications, networks, and APIs. (OSCP, OSCE, GPEN, GXPN, or eWPT certification is a valuable bonus, but not strictly required).
Attacker Mindset: A strong, innate attacker mindset – you quickly spot logic flaws, authentication bypasses, injection vectors, and exploit chaining opportunities.
Tool Proficiency: Expert-level proficiency with industry-standard tools such as Burp Suite, Metasploit, Nmap, Kali Linux, or their equivalents.
Communication & Detail: Extreme attention to detail and outstanding written communication skills are paramount. Much of this role involves clearly articulating your findings, how you discovered them, and how they can be fixed. This cannot be overstated.
Autonomy: Comfortable reading documentation, security advisories, and source code. You excel working independently in an asynchronous, low-oversight environment.
Growth Opportunity: No Prior AI/ML Security Experience Required!
While AI/ML security is a rapidly evolving field, we believe strong offensive security fundamentals are paramount. If you're an experienced web, API, or network pentester, we'll empower you to master the unique attack surfaces of AI – from prompt injection to adversarial inputs – on the job.
Contract Details & Compensation
Location: Fully remote – work from anywhere on our list of accepted locations.
Compensation: Highly competitive, ranging from $60–$120/hr based on location and seniority.
Hours: A minimum commitment of 10 hrs/week is required, with opportunities for up to 40+ hrs/week depending on project availability.
Engagement: 1099 Independent Contractor.
Payment: Weekly via PayPal or Stripe.
⚠️ Important Note: Project hours are dependent on client needs and can vary significantly week to week. We strongly recommend maintaining other work engagements or income sources alongside this contract rather than relying on it as your sole income.