Principal Security Researcher (AI Security & Penetration Testing)

fenko security • New Zealand

Visa Sponsorship

Apply Now

AI Summary

Fenko is hiring a Principal Security Researcher to lead penetration tests and AI security assessments for clients end to end. In this role, you will research vulnerabilities, develop repeatable testing methods, and build the tooling and automation behind Fenko's security services. You need strong offensive security experience, programming skills in Go/Python/Rust, and hands-on experience with agentic AI systems.

Key Highlights

Lead end-to-end penetration tests and AI security assessments for clients

Research vulnerabilities and translate them into repeatable testing methods and production tooling

Work directly with the founder and help shape Fenko's technical direction

Remote-first role anywhere in New Zealand with AEWV visa sponsorship available

Key Responsibilities

Lead penetration tests and security assessments end to end, including scoping, testing, verifying findings, rating risk, and reporting.

Assess client AI systems, covering prompt injection, agent and tool permissions, MCP integrations, and data exposure.

Research vulnerabilities, attack techniques, and countermeasures, and turn the results into repeatable testing and detection methods.

Build and maintain the tooling and automation behind services and products, including controls that keep automated testing within scope.

Evaluate AI models and agentic techniques for security work, and help shape how they are used.

Contribute to browser and IDE extension supply-chain research.

Set the testing standards and procedures that govern assessment work.

Investigate security incidents affecting systems or client engagements.

Advise clients on security architecture, hardening, and remediation.

Contribute technical control design and evidence to ISO 27001/42001 and SOC 2 programmes.

Searching for Cyber Security roles that provide visa sponsorship? Connect with international employers through Cyber Security Jobs with Visa Sponsorship opportunities actively seeking talented professionals.

Technical Skills Required

Penetration Testing Vulnerability Research AI Security Assessment

Benefits & Perks

Remote-first work anywhere in New Zealand

Flexible, async-friendly hours with few meetings

Ten days' paid sick leave from day one

KiwiSaver employer contributions on top of salary

Support for certifications such as OSCP and CRT, including study time and exam fees

Encouragement to speak at conferences and contribute to open-source security projects

Explore our comprehensive directory of visa sponsorship jobs from employers worldwide who are ready to sponsor talented international professionals.

Nice to Have

Familiarity with agent security frameworks such as the OWASP Agentic Security Initiative, MITRE ATLAS, or the Linux Foundation's agent identity and verification work.

OSCP, OSWE, CRT, or an equivalent certification.

Published research, CVEs, or open-source security tooling.

Job Description

Fenko is a New Zealand AI-native security company. We deliver penetration testing through Foxhound, our AI-enabled assessment platform, and we assess and secure the AI systems our clients are building. We also score browser and IDE extension risk through RiskyPlugins, maintain the open-source passive DNS project dnsmonster, and build AI agents for clients.

About the role

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.