Senior AI Engineer / Generative AI Specialist (Offensive Security)

BI.ZONE develops IT products for cybersecurity: from mobile applications to complex platforms, based on machine learning and GenAI methods. Thanks to our solutions, the lives of tens of millions of people are becoming better and safer.

At the AI Center, we focus on the applied use of AI/ML in BI.ZONE cybersecurity products and research the latest advancements in this field. Among other things, we are developing the BI.ZONE Cubi AI assistant, which helps information security specialists cope with large volumes of data and the growing level of cyber threats.

We are looking for an AI Engineer who will transform the routine work of pentester into autonomous AI pipelines.

We guarantee interesting and ambitious tasks, a friendly team, and support from the start!

What you will be doing:

• Designing and developing AI agents/assistants for Offensive Security tasks.
• Forming hypotheses and quickly implementing PoCs to test them.
• Building a Security Knowledge Base, developing RAG pipelines that will allow agents to instantly find exploits, CVEs, and technical documentation in internal knowledge bases.
• Developing and optimizing prompts, training agents to interact with pentest utilities.
• Participating in development at all stages of the AI/ML lifecycle (from data preprocessing to deployment and monitoring in production).
• Deploying GenAI applications to production together with the DevOps team.
• Assisting in knowledge transfer to colleagues and the external audience.

What is important to us:

• General understanding of security assessment and penetration testing techniques.
• Experience with penetration testing tools (Nmap, Burp, Metasploit, etc.).
• Solid knowledge of web application vulnerabilities, including (but not limited to) OWASP Top-10.
• 3+ years of Python development experience.
• Experience creating agents on modern frameworks (LangChain, LangGraph, LlamaIndex, Agno/Phidata).
• Knowledge of AI agent planning strategies (ReAct, Plan-and-Execute, etc.).
• Strong prompt engineering + chain/tool/function calling skills.
• Confident work with LLM APIs (OpenAI, vLLM, Anthropic, etc.).
• Understanding of agent protocols (MCP, A2A, AG-UI).
• Experience with vector databases (Weaviate, Pinecone, Qdrant, Milvus, etc.).
• Experience evaluating the quality of LLM systems (RAGAS, DeepEval, LLM-as-a-Judge, or similar).
• Experience with Linux, Git, Docker, and the ability to package your agent into a container.

We expect you to (soft skills):

• Senior-level autonomy: ability to manage a product component from idea to production, negotiate contracts and limitations.
• Not afraid to experiment and propose solutions.

What else is important to us, but we can consider candidates without it:

• Understanding of LLM attacks (Prompt Injection, Jailbreaks) or defenses against them (Guardrails).
• Experience in fine-tuning models (LoRA/qLoRA) on specific domains.
• Experience with self-hosted models.
• Full-stack web development experience.

We offer:

Security. All guarantees of official employment according to the Labor Code of the Russian Federation and the benefits of an accredited IT company.

Communities. Regular professional meetups and meetings for knowledge sharing. Also, interest-based communities: sports, games, books, anime.

Flexible schedule. No one monitors when an employee sits down at the computer, how many hours they spend in the office, or how often they work remotely.

Health care. Voluntary medical insurance with dental coverage from the first month of employment.

Learning. Certification, specialized courses, conferences, meetups, hackathons, CTFs.

Open atmosphere. We use informal address ("you"), no dress code, and no unnecessary bureaucracy.

Self-realization. Support for creativity and implementation of ideas. Opportunities for professional growth and personal brand development.

Discounts on fitness, purchases, and much more.

Discounts from BestBenefits, «Fitmost», «SberPrime+» and other partner companies for all employees.

Corporate life. Cool internal events and participation in sports competitions, plus merchandise and gifts.