Staff AI Engineer, Eye Security

• Strong hands-on cybersecurity experience. You have worked directly in one or more areas such as SOC operations, incident response, threat detection, vulnerability research, offensive security or security engineering
• Staff-level technical judgment. You can independently identify valuable research questions, decide what is worth pursuing, communicate your reasoning and influence engineers and security specialists without formal authority. Comfort in building things yourself. You can go from a research question to a working prototype largely independently
• Demonstrable hands-on interest in AI. You have built or experimented with LLMs, agents, RAG or related systems through professional work, independent research, open-source contributions or substantial personal projects
• Working proficiency in English. Dutch or German is a plus, not a requirement

Desirable

• AI is changing both the scale of cyber threats and how defenders operate
• Eye Security wants to use modern AI and agentic systems to make SecOps more effective and solve cybersecurity problems across our customer base that cannot scale through manual work alone
• We are hiring a Staff AI Security Engineer to champion AI security as a discipline at Eye Security, independently explore these opportunities, build working prototypes and help turn successful experiments into production capabilities
• Initial focus areas include Agentic SOC, AI-driven vulnerability hunting and the security of our own AI systems
• Expand Agentic SOC capabilities. Work directly with SecOps analysts to identify high-value investigation, triage and response workflows that can be improved through AI. Prototype agents, evaluate them against real operational cases and measure their effect on analyst quality, speed and workload
• Develop Agentic Workflows at scale. For example, research and prototype agentic systems that help Eye identify relevant vulnerabilities, validate exposure and exploitability, develop detection logic and prioritise action across customer environments
• Translate prototypes into customer-facing capability & tools. Actively explore with customers and partners the possibility of turning a prototype into a shippable tool, something that solves a real problem, like browser extensions (we have three to date), agentic skills, and other tools
• Help secure Eye’s AI systems. Assess agentic, LLM and RAG systems for realistic risks such as prompt injection, unsafe tool use, data leakage and supply-chain exposure, and turn findings into practical engineering controls
• Work closely with the Principals in your team. You will be part of a team that has hands-on AI expertise and emphasizes cooperation and mutual exchange
• Work across the organization. Work with internal teams to get findings and mitigations into shipped systems, and understand where AI-related incidents and threats are already showing up operationally
• Exposure: write up technical research for our Eye Research blog and represent Eye Security externally through talks and technical content on AI security
• Track the threat landscape. Stay ahead of emerging attack techniques against LLM and agentic systems, and emerging guidance (OWASP, NIST, ENISA) on how to defend against them, translating that into something Eye Security can act on
• In your first 6–12 months
• Write & execute a 100-day plan with input from the Research & Innovation team and the CTO
• Work together towards an Agentic SOC prototype and/or AI-driven CVE hunting capability that demonstrates a measurable improvement in analyst efficiency or investigation quality
• Complete a security assessment of at least one production AI system and help implement the resulting controls. Establish a working definition of "AI security review" at Eye Security
• Publish research or tooling when it creates meaningful value for customers or the wider security community