Head of Security Research & Engineering

Role overview Lead security research and engineering focused on determining whether vulnerabilities can be exploited in real environments. The role combines hands-on vulnerability research, cloud attack-path analysis, and development of AI agents that verify exposures from available evidence without attacking customer systems. It also leads a team and establishes ways to measure the accuracy of those assessments.

Responsibilities - Define the conditions that make vulnerabilities exploitable, using source code, patch differences, and public exploit information as evidence. - Build AI agents that assess exposures in customer environments without carrying out attacks. - Create test sets and a public benchmark to evaluate assessment accuracy, including false claims that a vulnerability is safe. - Analyze cloud attack paths, particularly involving identity and role trust, privilege escalation, network exposure, and Kubernetes. - Lead security engineers or a research team and deliver tested Python code.

Requirements - At least 10 years of security experience, including at least 5 years of hands-on vulnerability research or offensive security. - Demonstrated ability to investigate vulnerabilities and turn findings into repeatable checks. - Strong cloud attack-path reasoning, especially in AWS, including identity, privilege escalation, network exposure, or Kubernetes. - Strong Python skills and a practice of testing code and taking responsibility for shipped work. - Experience leading security engineers or a research team. - Ability to use AI tools while independently reviewing and owning the resulting work.

Nice to have - Research experience with vulnerability scanners, exposure management, or attack simulation. - Public security work, such as vulnerability credits, conference talks, or open-source tools. - Experience with attack-graph modeling, MITRE ATT&CK, or agent tooling.

Benefits and work setup - Remote, full-time work with occasional in-person team gatherings. - Stock options, family health insurance, and work equipment. - Opportunity to work with current AI models and agent tools on security problems.