AI Security and Reliability Engineer

And you are...

Are you the kind of person who wonders what the best deal is with these “transformers”? You skimmed “Attention Is All You Need,” but your attention… wandered ;)

Swordfish

harder to break, faster to notice, and easier to fix

If you’re practical about basics and curious about GenAI’s new tricks, you’ll fit right in.

Mission

safe, sane, and grounded

No-nonsense About Numberz.ai

should-costing + negotiation copilot

Outcomes (first 12 months)

• Real tests, not theater:

  Red-team checks for prompt/indirect injection, retrieval poisoning, tool-abuse, data leaks, and jailbreaks. Builds fail when protections slip.

• OWASP-savvy:

  Map our controls to

  OWASP Top 10 (web)

  +

  OWASP Top 10 for LLM Apps

  . No critical gaps; a simple quarterly scorecard.

• Fast intel → fast action:

  New attack write-ups/CVEs triaged in

  48h

  ; tests or mitigations land within

  7 days

  .

• Protect people & data:

  Keep PII/secrets from leaking; factual answers cite sources; retrieval stays fresh.

• See it, fix it:

  Dashboards show attacks tried, blocked, or missed; when we miss, we learn and close the loop.

• Monthly Security Brief:

  Ship a short GenAI + AppSec brief by the

  5th

  ; run a

  20-min teach-in

  ; track follow-ups to done.

What you’ll actually do

• Turn new attack ideas into small, automated tests (add to CI).

• Pair with engineers to bake security into prompts, tools, and retrieval.

• Keep a living

  Latest Threats

  list (indirect injections in PDFs, tool-call escalation, vector-DB poisoning, provider/model changes, classic web vulns).

• Write short, human-readable advisories and update runbooks.

Skills (the helpful kind)

• Comfortable in

  Python

  and

  CI

  ; you write tests and wire them up.

• Solid

  AppSec basics

  (OWASP Top 10, auth, secrets handling).

• Working knowledge of

  GenAI/RAG risks

  (prompt/indirect injection, retrieval poisoning, data exfiltration, jailbreaks).

• Clear writing and calm debugging—you explain, you don’t mystify.

• Bonus: JSON Schema, basic SQL, Docker; threat modeling (STRIDE/LINDDUN for GenAI).

Competencies (how you work)

• Always learning:

  You skim the noise and turn it into 1–2 concrete actions.

• Practical:

  You ship protections that actually reduce risk.

• Teacher energy:

  Monthly briefs people read without groaning.

• Partner mindset:

  Security as a habit, not a roadblock.