Staff AI Security Engineer

• Expand Agentic SOC capabilities. Work directly with SecOps analysts to identify high-value investigation, triage and response workflows that can be improved through AI. Prototype agents, evaluate them against real operational cases and measure their effect on analyst quality, speed and workload.
• Develop Agentic Workflows at scale. For example, research and prototype agentic systems that help Eye identify relevant vulnerabilities, validate exposure and exploitability, develop detection logic and prioritise action across customer environments.
• Translate prototypes into customer-facing capability & tools. Actively explore with customers and partners the possibility of turning a prototype into a shippable tool, something that solves a real problem, like browser extensions (we have three to date), agentic skills, and other tools.
• Help secure Eye’s AI systems. Assess agentic, LLM and RAG systems for realistic risks such as prompt injection, unsafe tool use, data leakage and supply-chain exposure, and turn findings into practical engineering controls.
• Work closely with the Principals in your team. You will be part of a team that has hands-on AI expertise and emphasizes cooperation and mutual exchange.
• Work across the organization. Work with internal teams to get findings and mitigations into shipped systems, and understand where AI-related incidents and threats are already showing up operationally.
• Exposure: write up technical research for our Eye Research blog and represent Eye Security externally through talks and technical content on AI security.
• Track the threat landscape. Stay ahead of emerging attack techniques against LLM and agentic systems, and emerging guidance (OWASP, NIST, ENISA) on how to defend against them, translating that into something Eye Security can act on.

In your first 6-12 months

• Write & execute a 100-day plan with input from the Research & Innovation team and the CTO.
• Work together towards an Agentic SOC prototype and/or AI-driven CVE hunting capability that demonstrates a measurable improvement in analyst efficiency or investigation quality.
• Complete a security assessment of at least one production AI system and help implement the resulting controls. Establish a working definition of “AI security review” at Eye Security.
• Publish research or tooling when it creates meaningful value for customers or the wider security community.

• Strong hands-on cybersecurity experience. You have worked directly in one or more areas such as SOC operations, incident response, threat detection, vulnerability research, offensive security or security engineering.
• Staff-level technical judgment. You can independently identify valuable research questions, decide what is worth pursuing, communicate your reasoning and influence engineers and security specialists without formal authority. Comfort in building things yourself. You can go from a research question to a working prototype largely independently.
• Demonstrable hands-on interest in AI. You have built or experimented with LLMs, agents, RAG or related systems through professional work, independent research, open-source contributions or substantial personal projects.
• Working proficiency in English. Dutch or German is a plus, not a requirement., * Prior offensive security experience (pentesting, red teaming, vulnerability research) that transfers to the AI/LLM domain. Background in SOC operations, MDR, or incident response.
• Contributions to the AI security community: CTF write-ups, published jailbreaks or mitigations, OWASP LLM Top 10 or MITRE ATLAS involvement, conference talks.
• Experience with managed LLM platforms (e.g. Bedrock)

• A research role with real technical ownership over how Eye Security approaches AI security, internally and in the market.
• Direct line from research finding to shipped mitigation
• Collaborate with talented people: work with a team that has hands-on AI expertise and emphasises cooperation; learn from security specialists, engineers, and researchers across the organisation
• Quarterly get-togethers and an annual company-wide retreat to bond with colleagues, learn about the business, and have fun outside of work
• A generous time-off policy, including a volunteering day and dedicated wellbeing time off