Member of Technical Staff, Vulnerability Researcher

Micro1; India; Remote; INR 14,085,000 - 18,779,000; Full time

Benefits offered by this job

Equity compensation

Performance-based bonuses

Health insurance premium reimbursement

Remote-first workforce

Job summary

micro1 is seeking a Mission-Critical Member of Technical Staff, Vulnerability Research, for a fully remote role. The candidate will conduct advanced offensive security research, design adversary simulations, and discover vulnerabilities across cloud infrastructure, proprietary apps, and AI-powered workflows.

You will participate in reverse engineering, exploit development, and threat research, collaborating with engineering to raise the overall security bar and publish internal research to shape

Qualifications

• Proven experience in offensive security, vulnerability research, red teaming, or exploit development.
• Deep understanding of cloud security across AWS and GCP, including IAM, networking, Kubernetes, containers, and identity systems.
• Strong background in application security, code auditing, reverse engineering, and vulnerability discovery.
• Experience identifying weaknesses across modern software supply chains, CI/CD systems, APIs, and infrastructure automation.
• Proficiency in Python, Go, Rust, C/C++, or similar languages used for security research and offensive tooling.
• Strong understanding of operating system internals, networking, authentication protocols, and modern security architectures.
• Ability to independently investigate ambiguous problems and develop novel attack techniques.
• Excellent written communication skills with the ability to explain complex vulnerabilities to engineering teams.

Responsibilities

• Conduct advanced offensive security research across cloud infrastructure, production services, internal tooling, and AI platforms.
• Design and execute realistic adversary simulations targeting identity systems, cloud control planes, supply chains, and distributed architectures.
• Discover and exploit vulnerabilities across proprietary apps, APIs, IaC, CI/CD pipelines, and AI-powered workflows.
• Research attack vectors against LLMs, AI agents, retrieval systems, and autonomous workflows.
• Reverse engineer services to uncover weaknesses and novel exploitation techniques.
• Simulate insider and APT scenarios, evaluating privilege escalation and lateral movement.
• Build offensive tooling, automation, fuzzers, and PoCs to accelerate discovery.
• Collaborate with infra, product, and AI teams to validate fixes and raise security bar.

Skills

Offensive security

Vulnerability research

Red teaming

Exploit development

Python

Go

Rust

C/C++

OS internals

Networking

Tools

AWS

GCP

Kubernetes

CI/CD tooling

Job description

Job Description

Job Title: Member of Technical Staff, Vulnerability Researcher

Job Type: Full-time

Location: Remote

The Role

We're building AI systems that push the frontier of what software can do. As a Member of Technical Staff, Vulnerability Research, you'll operate like an internal adversary—discovering novel attack paths before anyone else does. You'll research emerging threats across AI agents, cloud infrastructure, developer platforms, and production systems, partnering closely with engineering to make our stack fundamentally more resilient.

What You'll Do

• Conduct advanced offensive security research across cloud infrastructure (AWS, GCP), production services, internal tooling, and AI platforms.
• Design and execute realistic adversary simulations targeting identity systems, cloud control planes, supply chains, and distributed architectures.
• Discover and exploit vulnerabilities across proprietary applications, APIs, infrastructure-as-code, CI/CD pipelines, and AI-powered developer workflows.
• Research emerging attack vectors against LLMs, AI agents, retrieval systems, MCP integrations, prompt orchestration, and autonomous workflows.
• Reverse engineer critical services to uncover architectural weaknesses, novel exploitation techniques, and previously unknown vulnerability classes.
• Simulate insider and advanced persistent threat scenarios, evaluating privilege escalation, lateral movement, and defense evasion techniques across modern enterprise environments.
• Build custom offensive tooling, automation frameworks, fuzzers, and proof-of-concept exploits to accelerate vulnerability discovery.
• Partner closely with infrastructure, product, and AI engineering teams to validate fixes, improve secure-by-design practices, and raise the overall security bar.
• Publish internal research, document attack methodologies, and help shape long-term security strategy.

What We're Looking For

• Proven experience in offensive security, vulnerability research, red teaming, or exploit development.
• Deep understanding of cloud security across AWS and GCP, including IAM, networking, Kubernetes, containers, and identity systems.
• Strong background in application security, code auditing, reverse engineering, and vulnerability discovery.
• Experience identifying weaknesses across modern software supply chains, CI/CD systems, APIs, and infrastructure automation.
• Proficiency in Python, Go, Rust, C/C++, or similar languages used for security research and offensive tooling.
• Strong understanding of operating system internals, networking, authentication protocols, and modern security architectures.
• Ability to independently investigate ambiguous problems and develop novel attack techniques.
• Excellent written communication skills with the ability to explain complex vulnerabilities to engineering teams.

Preferred

• Experience researching AI/LLM security, including agentic systems, prompt injection, tool abuse, indirect prompt attacks, jailbreaks, model manipulation, RAG security, or autonomous workflows.
• Experience discovering zero-day vulnerabilities, developing exploits, or contributing to offensive security research.
• Published CVEs, conference talks, blog posts, open-source security tooling, or participation in bug bounty programs.
• Experience with macOS internals, endpoint security, virtualization, or hardware-backed security technologies.
• Familiarity with fuzzing, symbolic execution, binary analysis, or compiler security.
• Contributions to the broader security research community.

Compensation & Benefits Notice

The national pay range for this full-time position is base salary of $150,000 –$200,000. All employees are eligible for equity compensation, and employees may also receive performance-based bonuses, dependent on role and subject to company policies.

micro1 provides a comprehensive benefits package, including up to 100% reimbursement for health-insurance premiums, paid time off, a 401(K) plan with a company match, and additional benefits designed to support a high-performing, remote-first workforce.

Equal Opportunity

micro1 is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other characteristic protected by applicable local laws, regulations and ordinances.

If you need assistance and/or a reasonable accommodation during the application process, reach out to [e-mail]

AI Hiring Process

Our hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making.

Disclaimer

The information contained in this job posting, including but not limited to role responsibilities, qualifications, compensation, and benefits, is provided for informational purposes only and does not constitute a binding offer of employment. micro1 reserves the right to amend, modify, or withdraw any portion of this posting at its sole discretion and without prior notice. All employment decisions are made in accordance with applicable laws and regulations.