About the company
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Offensive AI Security Engineer based in the United States.
Responsibilities
- Conduct vulnerability research across applications, products, services, and infrastructure, focusing on subtle, high-impact vulnerabilities and attack paths that cross component or trust boundaries.
- Use threat analysis, architecture knowledge, source code, observed system behavior, and target familiarity to select research areas and guide investigations.
- Apply frontier and open-weight AI models, agents, and other AI capabilities throughout the research lifecycle, including reconnaissance, code analysis, hypothesis generation, exploit development, and verification.
- Design and optimize research harnesses that provide AI models with appropriate context, tools, execution environments, and feedback.
- Develop custom security tooling such as analysis utilities, fuzzers, agents, test harnesses, proofs of concept, and full exploits when required to answer research questions.
- Validate model-generated findings by reproducing issues, eliminating false positives, establishing prerequisites, and distinguishing theoretical weaknesses from demonstrated vulnerabilities with meaningful impact.
- Improve the reliability and scalability of AI-assisted security research by addressing false positives, false negatives, context limitations, nondeterministic behavior, and reproducibility challenges.
- Evaluate trade-offs between constrained, orchestrated research pipelines and more autonomous tool-using agents depending on the research objective.
- Partner with engineering and product security teams to communicate findings, support remediation, identify related risks, and validate fixes.
- Share tools, techniques, research methods, and lessons learned to help strengthen AI-enabled security practices across the broader security organization.
Requirements
- 5+ years of hands-on experience in vulnerability research, offensive security, application security, penetration testing, or a related discipline.
- Demonstrated ability to select research targets, formulate and refine hypotheses, and establish exploitability and security impact in complex software or production environments.
- Hands-on experience applying frontier and open-weight AI models to offensive security workflows, including selecting models appropriately when refusal behavior can interfere with legitimate security research.
- Experience evaluating AI-driven security research processes, including identifying false positives, missed vulnerabilities, unstable results, and reproducibility gaps.
- Strong understanding of agent architecture trade-offs and the ability to determine when controlled, reproducible workflows are appropriate versus when more open-ended agents provide value.
- Deep technical expertise in at least one area such as web applications and APIs, Java applications, cloud or service infrastructure, client software, operating systems, or reverse engineering.
- Strong programming and debugging capabilities, including the ability to understand unfamiliar code, develop research tooling, create proofs of concept, and trace behavior across system boundaries.
- Strong intuition for attack surfaces, trust boundaries, exploitability, and security impact.
- Persistence and self-direction when conducting open-ended research without a predetermined methodology or guaranteed outcome.
- Ability to communicate complex security findings clearly to both technical and non-technical audiences, including evidence, uncertainties, significance, and potential impact.
- Strong analytical thinking, research discipline, technical curiosity, and adaptability in a rapidly evolving AI and security environment.
Conditions
- Base salary range of $124,000–$271,200, depending on qualifications, experience, and location.
- Total direct compensation may also include bonus and equity in addition to base salary.
- Remote work opportunity within the United States.
- Location-based compensation structure, with ranges potentially varying by location.
- Comprehensive benefits designed to support physical, mental, emotional, and financial well-being.
- Benefits and perks supporting work-life balance and personal financial health.
- Opportunities to work on cutting-edge applications of AI in offensive security and vulnerability research.
- Collaborative, growth-oriented environment with opportunities to expand technical expertise and take on challenging research problems.
- Support for reasonable accommodations throughout the hiring process.
- Commitment to fair hiring practices focused on skills, experience, and potential.
- Anticipated application closing date: October 14, 2026.