AI Security Engineer

Who We Are

Founded in 2019, Rock Bund Capital is a proprietary trading firm deeply committed to shaping the future of the cryptocurrency industry. We have an average daily trading volume reaching $1 billion and peak daily trading volume of $9 billion USD. We process over 15 million transactions daily, trading more than 1,000 symbols across major CEx and DEx.

Our team combines expertise in traditional finance, quantitative research, and advanced engineering with a deep understanding of blockchain technology. This unique blend enables us to excel in trading across complex crypto markets, including both CeFi and DeFi, while providing capital and strategic guidance to projects that drive innovation and foster sustainable growth in the crypto industry.

What You Will Do

Requirements

Review & Security Design: Lead security reviews, threat modeling, and penetration testing for AI Agents. Design and implement defense mechanisms against emerging threats, including tool abuse, context contamination, data poisoning, and prompt injection. Automated Security Tooling: Design and develop AI-powered automated security detection tools.

Utilize Machine Learning (ML) and Deep Learning (DL) techniques to enhance threat detection, anomalous behavior analysis, and vulnerability discovery efficiency. Security Operations & Auditing: Participate in building Agent behavior auditing and anomaly detection systems to identify runtime malicious behavior chains. Help construct an AI-driven Security Operations platform to automate alert triage, attack attribution, and incident response strategy generation.

Security Guardrails Implementation: Co-design and implement Agent security guardrails, including input filtering, output sanitization, tool call permission controls, and sandbox isolation. , prompt injection, tool abuse, privilege escalation, data exfiltration, supply chain attacks). Explore, design, and deploy robust defense solutions tailored to real-world business scenarios.

Who You Are

Experience: Minimum of 3 years of experience in security development or penetration testing, with at least 1 year dedicated to LLM/AI security offense and defense. Proven Red Teaming or real-world adversarial experience is highly preferred. Frameworks & Frameworks: Deep familiarity with security frameworks such as OWASP Top 10 for LLM and MITRE ATT&CK.

Strong understanding of common AI attack vectors, adversarial logic, and mitigation strategies, paired with a strong passion for AI security. Domain Knowledge: Familiarity with the entire AI product lifecycle (design, development, deployment, and operations). Understanding of cloud-native threat detection and standard infrastructure security.

Prior experience in Web3 security and defense is a strong plus. , Python, Go, C++). Capable of building custom security tools from scratch or heavily customizing/extending open-source security platforms.

Soft Skills: Exceptional communication, collaboration, and project management skills. A self-starter with strong continuous learning capabilities, able to own projects independently and convert bleeding-edge research into practical production defenses.

Preferred Qualifications

/ Plus Points Proven track record in elite Red Teaming, or top-tier performance in major CTF/Cybersecurity competitions. , CNVD/CNNVD, CVEs), or a record of publishing Web/AI security papers in top-tier conferences/journals, or filed patents. , PyTorch, TensorFlow, LangChain, LlamaIndex), with hands-on experience in local LLM deployment and optimization.

Why Join Us

Competitive remuneration package and a m eritocratic culture where accomplishments are rewarded Fast paced and result-or