Senior Security Researcher

What you’ll do

• Drive product capability by bringing an offensive practitioner's perspective to scanning, fingerprinting, and attack surface data. Identify gaps in detection logic, protocol coverage, and vulnerability signals.
• Conduct original research on emerging attack techniques, exploitation trends, C2 infrastructure, and adversary tradecraft using Internet-wide scan data.
• Publish research reports, technical blog posts, and conference material (e.g. DEF CON, Black Hat) to establish authority in offensive security.
• Collaborate with Engineering and Product to translate findings into new scanning modules, fingerprints, risk indicators, and detection features.
• Lead agentic AI threat research: build, deploy, and evaluate autonomous penetration testing agents, LLM-powered vulnerability research tools, and multi-agent swarms for both tradecraft research and product detection capabilities.
• Track adversary infrastructure using red team and pentest knowledge to encode detection logic.
• Mentor and inform as an internal subject-matter expert on offensive techniques.
• Demonstrate curiosity, willingness to learn, and sound judgment in applying AI.

Skills and experience you’ll have

• 5+ years of hands-on penetration testing, red teaming, or adversary emulation experience against enterprise, cloud, or Internet-facing environments.
• Demonstrated ability to independently identify and characterize vulnerabilities, misconfigurations, or exploitation techniques.
• Strong understanding of network protocols, service fingerprinting, and Internet-scale scanning concepts (or fast ability to learn).
• Hands-on experience with agentic systems for offensive security, including building/evaluating LLM-powered attack agents using frameworks such as HackSynth, RedTeamLLM, CAI, PentAG; AI-assisted vulnerability research pipelines; or multi-agent adversary emulation tooling. Demonstrated understanding of their failure modes.
• Proficiency in scripting or coding (Python, Go, or similar) to build tooling, automate testing, or analyze large datasets.
• Familiarity with red team frameworks and tradecraft (C2 frameworks, initial access techniques, living-off-the-land methods, evasion).
• Comfort working with large-scale Internet scan data or strong interest in learning.

Preferred skills/experience

• Relevant certifications (OSCP, OSCE, OSEP, GXPN, or equivalent).
• Experience with IoT, OT/ICS, or embedded device security research.
• Prior work as a researcher at a security vendor.
• Evidence of research/tooling contributions to the agentic offensive space (benchmarks, PoCs, AI-assisted vulnerability discoveries) and agentic AI red teaming work (e.g. Microsoft's PyRIT, Cloud Security Alliance's Agentic AI Red Teaming Guide).
• Track record of public research output — CVEs, conference talks, technical blog posts, or tool releases.
• Familiarity with compliance-adjacent security testing (e.g. mapping pentest findings to SOC 2, ISO 27001, or CMMC).

Compensation

For high cost of living areas in the US (San Francisco / Seattle / NYC): $220,000 - $278,000 USD base + bonus eligibility + equity.
For all other US locations: $202,000 - $254,000 USD base + bonus eligibility + equity.
Compensation also includes competitive benefits: equity, health/dental/vision, retirement contribution, parental leave, mental health benefits, flexible PTO, professional development stipend, and annual bonus eligibility.