Security Researcher (multiple positions)

DepthFirst•San Francisco, CA

About The Position

We’re seeking an experienced Security Researcher to join our effort in building and training AI agents for vulnerability discovery and exploitation. We are building a technology capable of finding the next Log4J at scale, finding and remediating vulnerabilities in customer and open source codebases. We are looking for strong security researchers with strong intuition to identify, analyze, and investigate application vulnerabilities. You’ll collaborate with AI researchers and engineers to uncover novel attack vectors and contribute to the development of advanced detection and defense capabilities. Your work will play a crucial role in building a product that aims to redefine how companies do security.

Requirements

3+ years of full-time experience in security research, offensive security, or related fields.
Experience with finding vulnerabilities in source code
Experience creating PoC exploits for vulnerabilities
Programming experience in Python
A bachelor's degree in Computer Science/Software Engineering or equivalent industry experience
A love for technology, and an insatiable curiosity for new tools to tackle real problems
Capable of solving complex problems with simple solutions.
Building reliable and scalable products, making right trade-offs along the way
A tendency to leave things in a better way than you found it

Responsibilities

Build a technology capable of finding novel vulnerabilities at scale both in open source and proprietary codebases
Develop techniques to reduce false positives leveraging automated exploitation, proof of concept generation and context inference
Work closely with engineers to understand limitations and design new methodologies to improve our system
Publish internal technical reports and contribute to security advisories as needed.