AI Security Researcher/Research Engineer

• Demonstrated experience working on Secure AI (prompt injection attacks and security guardrails)
• Strong publication record in AI security, ML security, or closely related areas
• A track record of shipping products and features inside a fast-moving environment
• Strong coding skills in Python and familiarity with ML frameworks like PyTorch or JAX
• Experience training, fine-tuning, and evaluating large language models
• Deep familiarity with large language models and web agents, how they work, and how they are trained
• Experience applying security principles (e.g., information flow control, access control/least privilege)
• Demonstrated success in bringing clarity and ownership to ambiguous technical problems
• A Ph.D. in computer science is highly preferred, but we may consider some exceptions with industry experience

• Knowledge of AI Systems (pipelines, security evaluation, etc.)
• Open source projects on security/privacy
• Experience with confidential computing and ZKP/SMPC protocols
• Ph.D. in computer science from a top-tier school
• A strong publication record in premier systems, performance, or ML
• Work experience in industry is desirable

• Ability to work at an exciting and well-funded international startup headquartered in San Francisco
• Cutting-edge technology, allowing you to work with state-of-the-art tools and software solutions
• Competitive compensation and plenty of room for personal growth
• Great international exposure and team atmosphere

We are looking to hire in London but would consider an exceptional candidate in the rest of Europe.

We are looking for a researcher/research engineer to help mitigate the security risks that come with building AI systems-especially LLM-powered web agents and chatbots. In this role, you'll design and implement secure-by-design architectures, audit our LLM-powered web agent (https://brave.com/blog/ai-browsing/) and chatbot, and help set Brave's direction on how we identify, measure, and reduce security risk across AI products.

• Design and execute adversarial evaluations to uncover failure modes in LLM-powered web agents and chatbots (e.g., prompt injection, tool abuse, data exfiltration)
• Analyze model behavior (including internal thoughts) to understand and forecast security risks in frontier models
• Develop and prototype security-focused training and fine-tuning techniques
• Augment web agents with security principles including information flow control, privilege control and contextual security
• Partner with engineers and (privacy, ML, and Cryptographic) researchers to translate findings into product changes, tests, and measurable security improvements
• Help define a forward-looking security strategy and policy for building and responsibly releasing web agents-advocating for user protection

Remote or hybrid - London preferred but North America, EU, UK accepted