Staff AI Software Engineer

Responsibilities

• Design and build intelligent autonomous security testing agents using LLMs and AI/ML techniques
• Create systems for autonomous reconnaissance, vulnerability identification, and attack chain execution
• Build robust planning, tool-use, and failure-handling mechanisms for agents
• Develop services that operate 24/7 across thousands of targets
• Implement long-running agent memory and context management
• Connect AI agents into the Cosmos cloud platform
• Design architectures for massive concurrent testing operations
• Prototype breakthrough approaches to AI-driven security testing
• Implement safety mechanisms and ethical guardrails for responsible AI deployment
• Design evaluation and monitoring systems to distinguish real vulnerabilities from hallucinations

Requirements

• 7+ years of software engineering experience shipping production systems
• Deep AI/ML expertise with hands-on experience in LLMs and agent frameworks (LangChain, AutoGPT, CrewAI)
• Advanced programming skills in Python and Golang
• Full-stack capabilities including APIs, database schemas, and modern frontend frameworks (React/TypeScript)
• Experience designing and improving agent reliability and handling non-deterministic behavior
• Proficiency with cloud platforms (AWS, GCP, or Azure) and containerization (Docker/Kubernetes)
• Understanding of CI/CD pipelines and DevOps practices
• Must be based in the San Francisco Bay Area

Preferred Qualifications

• Experience in penetration testing, red teaming, or ethical hacking
• Understanding of common vulnerabilities and security frameworks
• Open-source contributions in AI, automation, or security
• Experience with multi-agent systems, reinforcement learning, or swarm intelligence
• Experience with vector databases, RAG pipelines, or advanced prompt engineering
• Knowledge of AI safety and alignment practices

About the Company

Bishop Fox is a leading authority in offensive security, providing solutions ranging from continuous penetration testing and red teaming to attack surface management. They have worked with a significant portion of the Fortune 100 and are known for their contributions to the security community through open-source tools and security advisories.