A

Assail

Autonomous AI-powered API security pentesting platform

Senior AI Engineer

Natural Language Processing & LLMsConfirmed live in the last 24 hours
Full-timeBoston, MA, USANo salary listed

About the Job

Requirements

  • At least 5 years of experience building production machine learning or artificial intelligence systems, including at least 2 years working directly on large language models or large language model-powered agents.
  • Deep Python knowledge and strong production-grade engineering practices, including testing, code review, and observability.
  • Hands-on fine-tuning experience with supervised fine-tuning, preference optimization methods such as direct preference optimization and generalized reward policy optimization, reinforcement learning from human feedback or AI feedback, data curation, and synthetic data generation.
  • Strong grasp of transformer architectures and the modern training stack, including PyTorch, Hugging Face, DeepSpeed or Fully Sharded Data Parallel, and Accelerate.
  • Experience designing and shipping multi-agent or tool-using large language model systems in production, rather than only demonstrations.
  • Experience designing rigorous evaluation harnesses, tracking experiments, and making model and agent decisions based on data.
  • Inference optimization experience with vLLM or TensorRT-LLM, quantization, and throughput/latency tradeoffs.
  • Comfort with retrieval pipelines, vector stores, and structured memory for agents.
  • Fluency with Kubernetes and containerized deployment.
  • Genuine interest in offensive security and ability to quickly learn OWASP Top 10, API security, web application penetration testing, and mobile penetration testing concepts.

Responsibilities

  • Design, implement, and continuously improve the behavior and prompting of Ares' named agents, including orchestration patterns, hand-offs, planning loops, tool use, and shared memory.
  • Contribute to the model powering Ares through data curation, supervised fine-tuning, preference optimization, and evaluation; own parts of the training pipeline from dataset construction through evaluation.
  • Extend the Javelin co-evolutionary self-training system so Ares can learn from its engagements and improve over time.
  • Build false-positive detection, tiered skill learning including suppression rules, agent directives, and code-patch proposals, and infrastructure that routes proposed changes through human approval and back into the platform.
  • Design security-specific evaluations covering OWASP Top 10 coverage, exploit chaining, finding accuracy, and agent reliability; track performance across model and agent changes.
  • Contribute to vision capabilities, iOS and Android coverage, and bring-your-own-key support shipping in Sidewinder and beyond.
  • Own latency, cost, observability, and failure-mode analysis for agents running in customer engagements; partner with the platform team on Kubernetes-based deployment.
  • Contribute to the live accuracy gauge and other customer-facing surfaces that expose model and agent quality.

Desired Qualifications

  • Direct offensive security background, including OSCP, OSWE, OSWA, capture-the-flag participation, bug bounty work, or prior red-team work.
  • Research publications at NeurIPS, ICML, ICLR, USENIX Security, IEEE Symposium on Security and Privacy, Black Hat, or DEF CON.
  • Open-source contributions to agent frameworks or large language model tooling.
  • Experience with adversarial machine learning or red-teaming AI systems.
  • Familiarity with mobile application reverse engineering or binary analysis.

About the Company

Assail

Autonomous AI-powered API security pentesting platform

Assail provides autonomous AI agents for API-first offensive security testing. Its flagship platform, Ares, runs continuous, machine-speed pentesting for APIs (with coverage for web and mobile) using swarms of 50–100+ AI agents trained on offensive tactics; it has a closed-loop learning process where discovered vulnerabilities train the AI, and can automatically generate custom exploit code when no known exploit exists. The system differs from traditional tools by deploying adaptive, autonomous agents that hunt, exploit, and evolve in real time rather than relying on predefined rules, and it opens the Ares Docker Agent for secure on-premises deployment. Its goal is to shorten vulnerability discovery and remediation from weeks to minutes and enable continuous security testing across APIs, web, and mobile applications for customers such as large manufacturers, government agencies, financial firms, and hospitals.

Company size
11-50
Company stage
Seed
Total funding
$250K
Headquarters
Las Vegas, NV
Founded
2025

Recently Posted Jobs

Explore more opportunities at Assail

See more jobs