We're a team of scientists, engineers, machine learning experts, and more, working together to advance the state of the art in artificial intelligence.

About Us The Agentic Red Team is a specialized, high-velocity unit within Google DeepMind Security. Our mission is to close the 'Agentic Launch Gap',the critical window where novel AI capabilities outpace traditional security reviews.

The Role As a Senior Security Engineer on the Agentic Red Team, you will be the primary technical executor of our adversarial engagements. You will work 'in the room' with product builders, identifying architectural flaws during the design phase long before formal reviews begin.

Key Responsibilities:

• Execute Agile Red Teaming: Conduct rapid, high-impact security assessments on agentic services, focusing on vulnerabilities unique to GenAI such as prompt injection, tool-use escalation, and autonomous lateral movement.
• Develop Advanced Exploits: Engineer and execute complex attack sequences that exploit non-deterministic model behaviors, agentic logic errors, and data poisoning vectors.
• Build Automated Defenses: Write code to transform manual vulnerability discoveries into automated regression testing frameworks ('Auto Red Teaming') that prevent regression in future model versions.
• Embed with Product Teams: Partner directly with developers during the design and build phases to provide immediate feedback, effectively shortening the feedback loop between offensive findings and defensive engineering.
• Curate Threat Intelligence: Maintain and expand a library of agent-specific attack patterns and exploit primitives to establish robust release criteria for new models.

About You In order to set you up for success as a Software Engineer at Google DeepMind, we look for the following skills and experience:

• Bachelor's degree in Computer Science, Information Security, or equivalent practical experience.
• Experience in Red Teaming, Offensive Security, or Adversarial Machine Learning.
• Strong coding skills in Python, Go, or C++ with experience building security tools or automation.
• Technical understanding of LLM architectures, agentic workflows (e.g., chain-of-thought reasoning), and common AI vulnerability classes.

Preferred Qualifications

• Hands-on experience developing exploits for GenAI models (e.g., prompt injection, adversarial examples, training data extraction).
• Experience working in a consulting capacity with product teams or in a fast-paced 'startup-like' environment.
• Familiarity with AI safety benchmarks, evaluation frameworks, and fuzzing techniques.
• Ability to translate complex probabilistic risks into actionable engineering fixes for developers.

Salary & Benefits The US base salary range for this full-time position is between $166,000 - $244,000 + bonus + equity + benefits.

XML job scraping automation by YubHub