AI Code Vulnerability Mining Engineer

ByLabs; San Francisco (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

ByLabs is seeking a skilled professional to develop AI-driven systems for automating vulnerability discovery and security analysis in large-scale codebases. This role involves building tools for code vulnerability detection, collaborating with security teams, and enhancing AI reasoning in security-critical code paths.

Ideal candidates will have strong programming skills in languages such as Go, Java, or Python, and familiarity with security tools like Semgrep and CodeQL. A keen interest in AI technology applied to security is essential.

Qualifications

• Strong software engineering skills with proficiency in programming languages like Go, Java, or Python.
• Analytical and problem-solving abilities with an interest in AI-driven security research.
• Basic understanding of cryptographic algorithms like ECDSA and EdDSA.

Responsibilities

• Build AI-assisted systems for code vulnerability detection.
• Develop workflows combining LLMs with security tools.
• Collaborate with security researchers to improve detection accuracy.

Skills

Software engineering

Proficiency in Go, Java, or Python

Analytical skills

Problem-solving skills

Understanding of cryptographic algorithms

Tools

Semgrep

CodeQL

SonarQube

Snyk

Job description

This role focuses on building AI-driven systems to automate and improve vulnerability discovery and security analysis across large-scale codebases.

Key Responsibilities

• Build AI-assisted systems for code vulnerability detection and security analysis.
• Develop workflows that combine LLMs with security tooling such as static analysis, fuzzing, and runtime tracing
• Improve AI reasoning over large repositories, complex execution flows, and security-critical code paths.
• Build internal tools for automated vulnerability mining, exploit validation, and security investigation.
• Collaborate with security researchers and engineering teams to improve detection accuracy and reduce false positives.
• Research practical applications of AI agents in offensive security and secure code review workflows.

Major Requirements

• Strong software engineering skills with proficiency in Go, Java, Python, or similar programming languages.
• Familiarity with SDL practices, code review processes, and common OWASP Top 10 security risks.
• Familiarity with security tools such as Semgrep, CodeQL, SonarQube, Snyk, or similar platforms.
• Strong analytical and problem-solving skills with a strong interest in AI-driven code security research.
• Basic understanding of cryptographic algorithms and concepts, including ECDSA, EdDSA, and related encryption/signature mechanisms.
• Experience building AI teams, RAG systems, AI skills, or tool-calling workflows is a plus.
• Experience in Web3 security research, contributions to Bug Bounty platforms, or 0day vulnerability discovery is preferred.