Remote job
Senior Security Engineer - Vulnerability Research
Job details
About this role
Role overview
Research vulnerabilities in software and cloud services to help prevent attackers from exploiting them. You’ll choose high-value targets, assess findings for practical risk, and work with engineering teams to improve software and shorten the path from discovery to repair. The team is also exploring AI-supported security workflows, making sound judgment about where automation helps.
Responsibilities
- Identify promising attack surfaces and vulnerability classes, and develop methods to investigate them. - Triage findings, judging severity, exploitability, and likely business impact. - Provide clear remediation guidance and contribute working code changes where appropriate. - Maintain threat models and use them to shape future research. - Build and maintain research tools, including fuzzing harnesses, code analyzers, and AI-assisted workflows. - Review source code and assess high-risk components, improving finding quality and reducing false positives.
Requirements
- At least five years of industry experience; seven or more is preferred. - Bachelor’s degree in computer science or a related field, or equivalent experience. - Strong understanding of web and native application security. - Hands-on vulnerability research experience through source review, manual penetration testing, or fuzzing. - Ability to assess vulnerability severity and exploitability and explain the impact. - Ability to read and write at least one of Go, C++, TypeScript/JavaScript, or Python, with experience in secure software development and release practices.
Nice to have
- Experience applying advanced AI models to security research, or analyzing reachability and exploitability at scale. - Native C/C++ security experience in privileged or agent-based software, or familiarity with AWS or Azure. - Public research, credited vulnerabilities, bounty findings, open-source security tools, or conference talks. - Knowledge of applied cryptography, including encryption, hashing, and key management.
Benefits and work setup
- Stated annual base salary is $191,000–$293,000, with equity and benefits including health coverage, retirement contributions, family-planning support, and paid volunteer time.