Want to know if this job is worth applying to?
Den Haag, Zuid-Holland, Nederland
Hybrid
AI is changing both the scale of cyber threats and how defenders operate. Eye Security wants to use modern AI and agentic systems to make SecOps more effective and solve cybersecurity problems across our customer base that cannot scale through manual work alone.
We are hiring a Staff AI Security Engineer to champion AI security as a discipline at Eye Security, independently explore these opportunities, build working prototypes and help turn successful experiments into production capabilities. Initial focus areas include Agentic SOC, AI-driven vulnerability hunting and the security of our own AI systems.
Expand Agentic SOC capabilities. Work directly with SecOps analysts to identify high-value investigation, triage and response workflows that can be improved through AI. Prototype agents, evaluate them against real operational cases and measure their effect on analyst quality, speed and workload.
Develop Agentic Workflows at scale. For example, research and prototype agentic systems that help Eye identify relevant vulnerabilities, validate exposure and exploitability, develop detection logic and prioritise action across customer environments.
Translate prototypes into customer-facing capability & tools. Actively explore with customers and partners the possibility of turning a prototype into a shippable tool, something that solves a real problem, like browser extensions (we have three to date), agentic skills, and other tools.
Help secure Eye’s AI systems. Assess agentic, LLM and RAG systems for realistic risks such as prompt injection, unsafe tool use, data leakage and supply-chain exposure, and turn findings into practical engineering controls.
Work closely with the Principals in your team. You will be part of a team that has hands-on AI expertise and emphasizes cooperation and mutual exchange.
Work across the organization. Work with internal teams to get findings and mitigations into shipped systems, and understand where AI-related incidents and threats are already showing up operationally.
Exposure: write up technical research for our Eye Research blog and represent Eye Security externally through talks and technical content on AI security.
Track the threat landscape. Stay ahead of emerging attack techniques against LLM and agentic systems, and emerging guidance (OWASP, NIST, ENISA) on how to defend against them, translating that into something Eye Security can act on.
Write & execute a 100-day plan with input from the Research & Innovation team and the CTO.
Work together towards an Agentic SOC prototype and/or AI-driven CVE hunting capability that demonstrates a measurable improvement in analyst efficiency or investigation quality.
Complete a security assessment of at least one production AI system and help implement the resulting controls. Establish a working definition of "AI security review" at Eye Security.
Publish research or tooling when it creates meaningful value for customers or the wider security community.
Strong hands-on cybersecurity experience. You have worked directly in one or more areas such as SOC operations, incident response, threat detection, vulnerability research, offensive security or security engineering.
Staff-level technical judgment. You can independently identify valuable research questions, decide what is worth pursuing, communicate your reasoning and influence engineers and security specialists without formal authority. Comfort in building things yourself. You can go from a research question to a working prototype largely independently.
Demonstrable hands-on interest in AI. You have built or experimented with LLMs, agents, RAG or related systems through professional work, independent research, open-source contributions or substantial personal projects.
Working proficiency in English. Dutch or German is a plus, not a requirement.
Prior offensive security experience (pentesting, red teaming, vulnerability research) that transfers to the AI/LLM domain. Background in SOC operations, MDR, or incident response.
Contributions to the AI security community: CTF write-ups, published jailbreaks or mitigations, OWASP LLM Top 10 or MITRE ATLAS involvement, conference talks.
Experience with managed LLM platforms (e.g. Bedrock)
The R&I team at Eye Security works on problems that sit just ahead of the MDR, Incident Response, and Threat Hunting teams. That research work includes designing agentic and LLM-assisted tooling, performing offensive and vulnerability research, or investigating threat tradecraft that is relevant when it comes to protecting our customers and the platforms they rely on.
With significant freedom to explore and build, the team investigates emerging areas of cybersecurity to help Eye Security stay ahead of evolving threats.
Much of the work we do is published on research.eye.security, and we present at conferences and industry events such as BlackHat.
A research role with real technical ownership over how Eye Security approaches AI security, internally and in the market.
Direct line from research finding to shipped mitigation
Collaborate with talented people: work with a team that has hands-on AI expertise and emphasises cooperation; learn from security specialists, engineers, and researchers across the organisation
Quarterly get-togethers and an annual company-wide retreat to bond with colleagues, learn about the business, and have fun outside of work
A generous time-off policy, including a volunteering day and dedicated wellbeing time off
We are an equal opportunity employer. We are committed to making our hiring process accessible to everyone. If you need a reasonable accommodation to apply or interview for this role, please inform the TA team.
