> Markdown version of [/jobs/ext/3563529-ai-red-team-engineer](https://www.wearedevelopers.com/jobs/ext/3563529-ai-red-team-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # AI Red Team Engineer - **Company:** Apollo Research - **Location:** London, UK (Remote available) - **Experience:** Experienced - **Salary:** £100,000.0 - £200,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Software System Penetration Testing, Cyber Security, Monitoring of Systems, Python (Programming Language), Red Team (Cyber Security), Software Safety, Large Language Models, AI Coding Agents, Blue Team (Cyber Security) - **Published:** October 3, 2026 - **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=3000040055-2 ## About the Role Must-haves * 2+ years of experience in offensive security, adversarial ML, or red teaming of AI systems. * Strong experience with AI coding agents, extensive use of, comparison of, or direct development of frontier coding agents. * Experience designing and executing structured adversarial testing campaigns * Strong Python programming skills * Strong written communication as you will produce publications and campaign write ups that need to be clear and credible externally. * Demonstrated ability to work independently on open ended adversarial problems. Good-to-haves * Familiarity with AI safety concepts, particularly agent related risks * Experience with LLM as a judge setups or AI monitoring more broadly * Background in penetration testing, CTFs, or computer security more broadly. We want to emphasize that people who feel they don't fulfill all of these characteristics but think they would be a good fit for the position nonetheless are strongly encouraged to apply. We believe that excellent candidates can come from a variety of backgrounds and are excited to give you opportunities to shine. ## Description We are currently building Watcher, a monitoring tool for coding agents. Our monitoring research agenda attempts to translate compute into safety at scale. Red teaming previously sat inside the RS (Control) role as a partial responsibility. As it's grown from a single pilot into a recurring need, it now needs a dedicated owner. As the AI Red Team Engineer you will help build the practice of red teaming AI monitors (both Watcher's own defenses and frontier labs' monitoring systems (see our pilot campaign red teaming Anthropic's auto mode)). You will hunt for attack surfaces monitors that haven't been tested against yet and turn what you find into fixes.You'll work closely with Marius (CEO & currently leads the monitoring efforts), control researchers and product engineers. You will like this opportunity if you think like an attacker and want your adversarial findings to directly strengthen AI monitoring systems. You will join a small team and will have significant ability to shape the team & tech, and have the ability to earn responsibility quickly., * Design and run red teaming campaigns combining severity graded failure mode injection into real trajectories, static monitoring benchmarks (e.g. MonitoringBench), and dynamic off policy control red teaming. * Identify novel attack surfaces monitors haven't been tested against. * Build and maintain automated red teaming pipelines that attack monitors at scale, rather than relying on one off manual probing. * Design iterative adversarial red team/blue team games, working with RS (Control) on the blue team side to keep escalating attack difficulty as monitors improve. * Track the research literature and real world incidents on agent failure modes, monitor evasion, and adversarial robustness. * Turn each campaign into specific, actionable recommendations for monitor developers e.g. on time of intervention, user authorisation, trust boundaries, and monitor visibility * Write up campaign findings as external publications and internal reports. * Feed findings back into Watcher's monitor development and Apollo's blue teaming research, so lessons learned externally harden our own product., * Run a red teaming campaign against a frontier lab's monitor : work through real coding sessions with injected attacks across a range of failure modes, identify improvement areas, and deliver actionable recommendations the partner lab can implement. * Build an automated red teaming pipeline that attacks Watcher's monitors at scale, rather than relying on one off manual red teaming. * Investigate a new attack surface : an emerging agent capability or novel evasion vector not yet in Apollo's failure mode catalog and produce a write up and recommendations for the monitoring team., * Location : This is an in person role working out of our London or San Francisco office. We offer flexible working hours and wfh arrangements. * Visa sponsorship : We sponsor visas in both the UK and US. Sponsorship isn't guaranteed for every role or candidate, but if we make you an offer, we'll work with you to find the right visa route., The product team consists of research scientists: Victor Gillioz, Monika Jotautait , Dmitrii Volkov; product engineers: Jeremy Neiman, Zak Walters, Zen van Riel, Srdjan Miletic and Gustavo Bicalho; and our GTM lead: Kyle Dai. Marius Hobbhahn (CEO) advises the team. Furthermore you will interact with our other SWEs and researchers, since we intend to be our own customer by using our products internally for our research work. You can find our full team here. ## Related Videos - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Psychological Safety in Software Engineering - Jenny-Margrethe Vej & Alexandra Hou Aldershaab](https://www.wearedevelopers.com/videos/2142-psychological-safety-in-software-engineering-jenny-margrethe-vej-alexandra-hou-aldershaab) - [Living Documentation That Can't Die](https://www.wearedevelopers.com/videos/2025-living-documentation-that-can-t-die) - [The New Org Chart: When AI Joins the Workforce](https://www.wearedevelopers.com/videos/100036-the-new-org-chart-when-ai-joins-the-workforce) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Hiring AI Native Talents](https://www.wearedevelopers.com/videos/100268-hiring-ai-native-talents) ## Related Articles - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [How to start an AI project for a good cause and boost your career](https://www.wearedevelopers.com/magazine/15-how-to-start-an-ai-project-for-a-good-cause-and-boost-your-career) - [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this) - [MLOps And AI Driven Development](https://www.wearedevelopers.com/magazine/82-mlops-and-ai-driven-development)