Staff Security Researcher

What you'll do

• Conduct security research in two or more specialty areas to identify novel and systemic vulnerabilities.
• Validate vulnerabilities through hands-on testing and develop proof-of-concept exploits for real-world attack scenarios.
• Research AI and agentic surfaces to define security requirements for engineering teams.
• Build tooling and automation to scale security research and agent-assisted vulnerability discovery.
• Assess emerging industry vulnerability classes against the codebase and drive systemic remediation.
• Research the security posture of open source tools and report findings to maintainers.
• Provide actionable feedback to engineering teams and mentor other individual contributors.
• Share knowledge and novel vulnerability types with the broader security community.

What we're looking for

• 7+ years of experience in security research, penetration testing, or offensive security roles.
• Hands-on experience discovering and exploiting vulnerabilities.
• Subject matter expertise in at least two technical areas impacting product security.
• Proficiency in one or more of Ruby, Go, Python, TypeScript, or Rust.
• Ability to read and analyze code across multiple languages and codebases.
• Understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation.
• Experience leading technical objectives in cross-functional teams.
• Excellent written communication skills to articulate complex topics and risk assessments.
• Published security research or conference presentations (preferred).
• Background in software engineering with distributed systems expertise (preferred).
• Security certifications such as OSCP, OSCE, GPEN, or similar (preferred).
• Experience with GitLab or similar DevSecOps platforms (preferred).