AI-Augmented Security Researcher

ZeroPath Corp.; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

ZeroPath Corp. seeks a security researcher to hunt real-world vulnerabilities across open-source and customer codebases, validate AI-generated findings, and help shape the detection engine that powers ZeroPath.

You will audit code, triage scanner outputs, write detailed vulnerability reports, and coordinate responsible disclosure. Join a team at the intersection of manual research and AI-augmented discovery, influencing future AI alerts.

Qualifications

• 3+ years of experience in application security research, penetration testing, or red teaming
• Demonstrated ability to find and responsibly disclose vulnerabilities (CVEs, bug bounties, or published research)
• Strong understanding of common vulnerability classes: OWASP Top 10, business logic flaws, auth bypasses, injection chains
• Experience with static analysis concepts, code review, and source code auditing
• Excellent written communication for vulnerability reports and research write-ups

Responsibilities

• Conduct security research on open-source projects and customer codebases across multiple languages
• Validate and triage AI-generated vulnerability findings to calibrate false positive rates
• Write detailed vulnerability reports and coordinate responsible disclosure and CVE assignment
• Define and refine detection rules, heuristics, and prompt strategies for the scanning engine
• Collaborate with the engineering team to improve detection of business logic and auth flaws
• Contribute to ZeroPath's public research blog and Wall of Fame

Skills

Application security

Penetration testing

Red teaming

Code auditing

Static analysis

Vulnerability reporting

Written communication

Open-source research

Tools

CodeQL

Semgrep

Tree-sitter

LLM-powered tools

Job description

ZeroPath Corp. seeks a security researcher to hunt real-world vulnerabilities across open-source and customer codebases, validate AI-generated findings, and help shape the detection engine that powers ZeroPath.

You will audit code, triage scanner outputs, write detailed vulnerability reports, and coordinate responsible disclosure. Join a team at the intersection of manual research and AI-augmented discovery, influencing future AI alerts.