AI-Powered AppSec Engineer & Vulnerability Researcher

Theori; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Theori is seeking a hands-on Cyber Security Engineer to own the end-to-end triage and validation lifecycle for AI-powered vulnerability reports. You will separate true positives from noise, write proof-of-concept exploits, and report findings upstream to vendors.

This highly technical role suits someone who thinks like an attacker, thrives in ambiguity, and has a track record of finding and exploiting vulnerabilities. Based in US or Canada, remote work may be considered.

Qualifications

• Experience in security engineering, vulnerability research, or penetration testing.
• Proficient at reading and auditing code across multiple programming languages.
• Proven track record with bug bounty programs or CTF writeups.
• Based in US or Canada.

Responsibilities

• Triage and validate vulnerability reports produced by our AI static analysis tool, verifying severity, exploitability, and business impact.
• Write proof-of-concept exploits for critical vulnerabilities to confirm true positives.
• Analyze false positives to identify patterns and provide structured feedback to engineering.
• Author detailed vulnerability reports that will be submitted to upstream vendors and open source projects.

Skills

CTF experience

Vulnerability research

Exploit development

Code auditing

Bug bounty

AI security tooling

Job description

Theori is seeking a hands-on Cyber Security Engineer to own the end-to-end triage and validation lifecycle for AI-powered vulnerability reports. You will separate true positives from noise, write proof-of-concept exploits, and report findings upstream to vendors.

This highly technical role suits someone who thinks like an attacker, thrives in ambiguity, and has a track record of finding and exploiting vulnerabilities. Based in US or Canada, remote work may be considered.