AI Security Specialist

Description

**Our Way of Working in the Team:** -------------------------------- Transform your career with iFood! We are a Brazilian technology company and a reference in Latin America. Through innovative solutions, we connect thousands of restaurants to millions of consumers daily, averaging 100 million orders per month. Beyond food delivery, we also operate iFood Mercado, iFood Farmácia, and iFood Pet. We also have iFood Pago, our Fintech, which includes iFood Benefícios (iFood’s meal and food vouchers) and iFood Pago itself—the bank for restaurants. Join us and become part of a team that is always at the forefront with cutting-edge technology and continuous innovation. **Your Daily Menu:** ------------------------ As an **AI Security Specialist**, you will support the AI Security team in protecting iFood’s Artificial Intelligence ecosystem, working on initiatives involving LLMs, agents, Machine Learning models, internal platforms, deployment pipelines, and integrations with sensitive data. On a day-to-day basis, you will: * Support security testing of LLM-based applications, including prompt injection, jailbreak, data leakage, tool abuse, and context manipulation scenarios. * Execute test cases on internal and user-facing agents, following playbooks defined by the team. * Contribute to the evolution of test suites using tools such as Promptfoo or equivalents. * Support analysis of alerts and signals generated by controls like LLM Firewall, guardrails, Anonymizer, and AI Gateway. * Perform functional validations and regression testing on AI Security services and controls. * Support basic analysis of logs, metrics, and events related to LLM, agent, and internal platform traffic. * Help identify false positives, false negatives, and opportunities for improvement in detection rules, heuristics, and policies. * Support security reviews of MCPs, skills, and tools used by developers or agents. * Contribute to basic testing related to ML artifact security, supply chain, and quality gates in pipelines. * Document technical findings, evidence, FAQs, guides, playbooks, and best practices clearly, concisely, and actionably. * Support educational initiatives, awareness campaigns, CTFs, meetups, applied research, and consolidation of technical references. **Ingredients We’re Looking For:** ------------------------------ * Knowledge of information security, software development, infrastructure, or related fields. * Understanding of APIs, HTTP, authentication, authorization, logging, and basic event analysis. * Proficiency in at least one programming language—preferably Python, Go, or JavaScript/TypeScript. * Familiarity with Git, GitLab/GitHub, CI/CD pipelines, and code reading. * Interest in Artificial Intelligence, LLMs, agents, Machine Learning, or AI-focused security. * Ability to read technical documentation and translate learnings into tests, checklists, or simple recommendations. * Experience documenting tests, findings, evidence, and recommendations. * Experience analyzing logs, permissions, prompts, configurations, and data flows. * Technical curiosity, eagerness to learn, and ability to grow with guidance and feedback. * Responsibility when handling sensitive data, credentials, internal environments, and security test results. **To Enhance the Flavor:** ------------------------- * Academic experience such as scientific initiation, graduate studies, extension courses, or other programs in AI, data, or software engineering. * Basic knowledge of OWASP Top 10, OWASP Top 10 for LLM Applications, or threat modeling concepts. * Familiarity with prompt injection, jailbreaks, data leakage, tool abuse, or attacks targeting LLM applications. * Experience with testing tools, automation, scripting, or evidence organization. * Familiarity with MCP, skills, agents, AI gateways, token exchange, or identity propagation concepts. * Interest in ML Security, model supply chain, dataset security, dependencies, or Machine Learning artifacts. * Participation in CTFs, technical communities, research groups, meetups, or technical writing initiatives. * Interest in applied research in AI Security, LLM Security, Agent Security, or ML Security. We seek a person passionate about technology security, constantly pursuing new learning opportunities and embracing challenges. If this resonates with you, we’d love to meet you!