Security Researcher

NeuroStrike AS; Oslo fylke; Hybrid; NOK 1,000,000 - 1,500,000; Full time

Job summary

NeuroStrike AS in Oslo seeks an experienced offensive security expert to drive our AI safety engine. You will research attack techniques, translate them into verifiable exploit logic, and benchmark against real CVEs and targets to reduce false positives.

You will review high-severity findings and help customers understand impact and remediation, while coordinating responsible disclosure when novel vulnerabilities are found. Eligibility for security clearance is required for certain assignments.

Qualifications

• Hands-on penetration testing, red teaming or bug bounty experience.
• Deep understanding of web and API vulnerabilities (OWASP Top 10 and beyond).
• Comfortable scripting your own tooling (Python, Go, TypeScript or similar).
• Strong written communication — you can explain a complex exploit chain clearly.
• High ethical standards and respect for scope and authorization.
• Willing and eligible for security clearance at NATO level for certain assignments.

Responsibilities

• Research attack techniques and encode them into the engine.
• Build verification oracles that prove exploitability rather than guesswork.
• Benchmark the engine against real CVEs and lab targets to improve recall and reduce false positives.
• Review high-severity findings and help customers understand impact and remediation.
• Coordinate responsible disclosure when the engine discovers novel vulnerabilities.

Skills

Penetration testing

Red teaming

Bug bounty experience

Strong written communication

High ethical standards

Security clearance eligibility

Tools

Python

Go

TypeScript

Job description

You will be the offensive expertise behind our AI engine. You will research attack techniques, turn them into reliable, verifiable exploit logic, benchmark the engine against real CVEs and vulnerable applications, and make sure we report real security issues — never noise.

• Research web, API, cloud and internal-network attack techniques and encode them into the engine
• Build verification oracles that prove exploitability instead of guessing
• Benchmark the engine against real CVEs and lab targets and drive recall up and false positives down
• Review high-severity findings and help customers understand impact and remediation
• Coordinate responsible disclosure when the engine discovers novel vulnerabilities

• You must be willing and eligible to be authorised for classified information at BEGRENSET / NATO RESTRICTED level, and to undergo security clearance (sikkerhetsklarering) under the Norwegian Security Act if a customer assignment requires it. This is required due to the nature of our customers.
• Hands-on penetration testing, red teaming or bug bounty experience
• Deep understanding of web and API vulnerabilities (OWASP Top 10 and beyond)
• Comfortable scripting your own tooling (Python, Go, TypeScript or similar)
• Strong written communication — you can explain a complex exploit chain clearly
• High ethical standards and respect for scope and authorization