Other open roles

View all opportunities

GenAI Security Evaluation Engineer (Up to $150/hr)

$150

per hour

Contractor Remote Last verified 21 Jul 2026

Listed on Turing ↗

turing.com

Apply

Affiliate disclosure

Work Expert (WE) is an independent publishing and referral website. We are not a recruiter, hiring manager, agent or employer, and we are not affiliated with or endorsed by Turing. Applying takes you to the platform's own website, where we may be recorded as the referring source. We may receive a referral fee at no additional cost to you. Read our full affiliate disclosure →

Apply within 30 days of clicking - Turing only credits applications inside its 30-day attribution window.

About the Role

We’re looking for experienced security engineers to evaluate how effectively static analysis tools detect vulnerabilities in GenAI applications. You’ll build small, runnable agent and RAG codebases containing realistic examples of Sensitive Information Disclosure and Excessive Agency, along with fixed and near-miss versions. You’ll then trace, annotate, test, and explain each finding.

What You'll Do

Build runnable agent/RAG repositories with code-reachable Sensitive Information Disclosure or Excessive Agency vulnerabilities across tool calling, memory, and MCP.
Create vulnerable, fixed, and hard-negative variants with minimal security-relevant differences.
Trace and annotate assets, data/action paths, controls, root causes, severity, and residual risk.
Define authorization contexts and write deterministic tests validating vulnerable, fixed, and negative behavior.
Recommend security controls and participate in calibration and peer review.

You're a Good Fit If You

Required skills: Cyber Security, LLM, Code Reviews, Code Analysis
5+ years in application/product security or security-focused software engineering, including secure code review.
Experience with source-to-sink analysis, taint analysis, SAST, CodeQL, or Semgrep.
Hands-on experience building LLM agents or RAG systems using frameworks such as LangChain, LlamaIndex, OpenAI/Anthropic SDKs, or MCP.
Strong authorization knowledge, including actors, trust boundaries, tenants, OAuth, IAM, identity, permitted data/actions, purposes, recipients, and document-level access control.
Production coding experience in Python and/or TypeScript, with strong judgment in distinguishing genuine SID/EA findings from non-findings.
Experience with OWASP LLM security risks, MCP, threat modeling, or security evaluation is a plus.

Get ready for Turing

Design a resume for Turing Prepare for the Turing interview

Role Highlights

Pay

Up to $150/h

Contract

Contractor

Location

Remote

Pay & Payout

Independent contractor engagement through Turing. Apply via the link below - Turing handles vetting, onboarding and payment.

Common Questions

Turing has a reliability rating of very reliable based on the listings we track, with an onboarding time of 5-14 days. See our full Turing review for the details behind that rating.

Applying takes you to Turing's own website, where the application is completed. We are not a recruiter or employer and do not process applications directly - we may be recorded as the referring source.

Up to $150/h - Independent contractor engagement through Turing. Apply via the link below - Turing handles vetting, onboarding and payment.

Build runnable agent/RAG repositories with code-reachable Sensitive Information Disclosure or Excessive Agency vulnerabilities across tool calling, memory, and MCP. Create vulnerable, fixed, and hard-negative variants with minimal security-relevant differences. Trace and annotate assets, data/action paths, controls, root causes, severity, and residual risk.

Apply on Turing

Opens Turing in a new tab. You pay nothing; we may earn a referral fee.