Staff Security Researcher

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com, and read about the latest news via our StoryHub.

Lenovo Digital Trust Lab seeks a hands-on and innovative Security Researcher with expertise in emerging AI threats to join our cutting-edge research team. This role will help expand the capabilities of our AI security platform by developing advanced methods to detect, assess, and secure risks posed by AI applications and AI agents.

You will lead research into emerging AI threats and translate your findings into practical, production-grade detections and defenses.

Job Responsibilities

• Lead research into emerging AI security risks across AI applications, AI agents, and AI services in enterprise environments.
• Develop advanced detection methods to identify and analyze AI tools, agents, and their behavior.
• Design risk assessment frameworks to evaluate AI agents’ permissions, data access, tool usage, and potential for data leakage or abuse.
• Conduct adversarial research on AI agents and agentic frameworks (prompt injection, tool abuse, excessive agency, data exfiltration) and propose mitigations and policy controls.
• Collaborate with engineers and product leaders to turn research into capabilities of our AI security platform.
• Maintain awareness of the latest research and technologies in security, AI, and trust, and evaluate their relevance for our innovation pipeline.
  
  

• 3+ years of experience as a Security Researcher.
• Strong understanding of AI/LLM architectures and integration patterns (LLM, RAG, MCP, tool orchestration, AI agents).
• Solid understanding of operating system and networking internals.
• Experience developing detection logic from security telemetry.
• Familiarity with MITRE ATTCK, MITRE ATLAS, OWASP Top 10 for LLM Applications, and threat modeling methodologies.
• Proficiency in programming and scripting languages (Python and at least one of C/C++, Go, or Rust).
• Excellent problem-solving skills and ability to lead research independently in a fast-paced, collaborative environment.
  
  

• Experience researching for security products (e.g., threat detection or data protection solutions).
• Experience with macOS security research, including macOS internals (e.g., XNU, launchd, TCC, system extensions, code signing and notarization).
• Hands-on experience with agentic AI frameworks (LangChain, AutoGen, CrewAI, Semantic Kernel, etc.) and their associated security risks.
• Familiarity with AI security toolkits (e.g., Garak, PyRIT, LLM Guard, NeMo Guardrails).
• Publications, conference talks, or CVEs in security or AI security.
  
  

• Opportunities for career advancement and personal growth
• Access to a diverse range of training programs to sharpen your skills
• Performance-based rewards that celebrate your achievements
• Enjoy the best of both worlds with our hybrid setup: 3 days connecting with the team in the office and 2 days working from the comfort of your home