Member of Technical Staff, Vulnerability Researcher

About the role

A full-time remote role conducting advanced offensive security research across cloud, application and AI systems. The researcher finds novel attack paths, builds proof-of-concept tooling and helps engineering teams fix weaknesses.

What you will do

• Research vulnerabilities across cloud infrastructure, services, APIs and AI platforms
• Audit code, reverse engineer software and develop proof-of-concept exploits
• Design adversary simulations and advanced red-team scenarios
• Assess AWS and GCP environments including IAM, networking and Kubernetes
• Review CI/CD pipelines, infrastructure as code and supply-chain risks
• Study LLM and agent security, including prompt injection and tool abuse

What they look for

• Proven experience in offensive security, vulnerability research or exploit development
• Deep knowledge of AWS and GCP security, IAM and identity systems
• Strong application security, code auditing and reverse engineering skills
• Proficiency in Python, Go, Rust, C or C++

Nice to have

• Experience with AI or LLM security, agentic systems or RAG security
• Zero-day discovery, published CVEs, bug-bounty work or open-source tooling
• Experience with fuzzing, symbolic execution, binary analysis or macOS internals

Pay

USD 240,000 to 400,000 per year