Senior Security Engineer, Vulnerability Research

About the role

A security engineer on a vulnerability research team that hunts unknown flaws in software and cloud services and drives fixes before attackers exploit them. The work raises the cost of finding bugs and speeds the find-and-fix loop.

What you will do

• Choose attack surfaces and bug classes to target and build the capability to find new vulnerabilities
• Triage new findings quickly, ranking them by exploitability and real impact
• Give engineering high-quality patch guidance and working pull requests alongside reports
• Maintain a threat model of software and services to steer future research
• Evaluate frontier AI tooling and build agentic workflows for vulnerability research
• Build and maintain tooling such as fuzzing harnesses and static and dynamic analyzers

What they look for

• Bachelor's degree in computer science or a related field, or equivalent experience
• Five or more years of industry experience, with seven or more preferred
• Strong grasp of web and native application security
• Hands-on vulnerability research through code review, manual penetration testing or fuzzing
• Ability to judge severity and exploitability of a vulnerability and its business impact
• Coding ability in Go, C++, TypeScript or JavaScript, or Python

Nice to have

• Experience applying frontier models to vulnerability research with a clear view of where AI helps and where it adds noise
• Experience with reachability or exploitability analysis at scale
• Experience with native code security in privileged or agent-based software
• Experience with cloud platforms such as AWS or Azure