Software Engineer - AI (Level determined by experience)

About the role

NetSPI+Synack is a leader in offensive security, combining elite human expertise with agentic AI to help organizations identify, validate, prioritize, and remediate exploitable risk across their entire attack surface. Its platform delivers expert-validated testing in depth, continuously, or on demand, from pre-production code to live production environments, so security teams can separate vulnerability noise from real risk, including the growing threat of AI-driven attacks. With global reach and more than 13 million hours of real-world offensive testing experience, NetSPI+Synack serves many of the world's largest enterprises and government organizations with one ambition: nothing left to exploit.

We are looking for individuals with a collaborative, innovative, and customer-first mindset to join our team. Learn more about our award-winning workplace culture and get to know our A-Team at www.netspi.com/careers and www.synack.com/careers.

You'll design and ship AI agents that plan, reason, drive security tooling and surface exploitable vulnerabilities, running autonomously inside sandboxed environments. It's a hands-on senior role spanning applied AI and cybersecurity. You'll own systems end to end and raise the technical bar for the team around you.

Sounds interesting? Keep reading…

Please note: This is a remote position based in the U.S. We can only hire U.S. citizens for this position due to federal government contract requirements.

Here’s what you'll do

- Build AI agents that automate penetration testing: planning, tool use, reasoning over findings, and acting safely within scope.

- Stand up and run the sandboxed cyber-lab and range infrastructure, containerised on Kubernetes, where these agents execute offensive tooling.

- Ship features from ideation through production, including evals, guardrails and monitoring.

- Improve how our agents work: prompting, tool orchestration, evaluation, and cost.

- Lead code reviews and design sessions, and help the engineers around you grow.

- Work closely with our security researchers to translate how they hack into how our agents operate.

Here’s what you’ll need

- 7+ years of experience in software engineering.

- Proven ability to build and scale production systems

- Strong Python, polyglot codebase,

- Fluent or willing to learn Go

- Experience building LLMs an agentic frameworks leveraging tools like RAG, MCP- from dev environment to production

- Demonstrate ability to create reliable agents (prompting, evaluation, guardrails, understanding of token and cost optimization

- Capable leveraging Docker, Kubernetes, isolated sandbox, cloud experience GCP preferred

- Brings a disciplined testing approach to microservices gPRC, API design, async messaging (Pub/Sub, Kafka)

- Passionate desire to understand how systems get compromised