Offensive AI Engineer – Frontier AI Security & Testing

Who we are looking for

State Street Global Cybersecurity (GCS) is looking for a hands-on Offensive AI Engineer to join Frontier AI Security & Testing (FAST). FAST is a new research and development team within Regulatory Assurance, Penetration Testing & Offensive Research. This role works at the intersection of frontier AI, cloud engineering, data engineering and offensive security. You will design, deploy and run the secure AWS-based platforms, evaluation harnesses and data pipelines that let State Street use frontier AI models safely as an offensive security capability.

This is an engineering role, not an advisory or architecture-only one. You will build, configure, deploy, troubleshoot and automate. You will work directly with frontier models, agentic frameworks and enterprise APIs. The work also includes putting technical controls in place so that AI is used in an auditable, governed way in a highly regulated financial services environment.

Why this role is important to us

State Street is expanding its use of frontier AI across cybersecurity to strengthen resilience, speed up adversary emulation and improve how defenses are validated. FAST decides which models can be trusted, shows with evidence what they can do, builds the platform they run on, and turns model capability into tools that red team, penetration testing, purple team and threat hunt teams can use. As an Offensive AI Engineer, you will help build the execution, evaluation and control layer that lets these capabilities run safely at enterprise scale.

What you will be responsible for

As an Offensive AI Engineer you will:

AWS AI infrastructure and deployment

• Design, engineer and deploy secure, isolated AWS environments to host and access frontier AI models. This includes Amazon Bedrock, SageMaker, private endpoint connectivity (PrivateLink/VPC endpoints), EKS/ECS, Lambda and API Gateway.
• Build and maintain infrastructure-as-code (Terraform or CloudFormation) and CI/CD pipelines for AI workloads, with repeatable and auditable deployment patterns.
• Engineer network segmentation, identity and access controls, secrets management and egress restrictions that create enforceable trust boundaries around agentic AI activity.

Frontier model engineering and evaluation

• Integrate with frontier model provider APIs and SDKs from major commercial vendors. Build model-agnostic abstraction layers that allow fast model onboarding and side-by-side comparison.
• Design and build standardized evaluation harnesses and benchmarking frameworks. These should measure model capability, precision, false-positive rate, reliability, cost and failure modes across offensive security tasks in a repeatable way.