Founding Member of Technical Staff (Security)

Crane Venture Partners; San Francisco (CA); Hybrid; USD 100,000 - 150,000; Full time

Benefits offered by this job

WeWork All Access Pass

Hybrid work model

Job summary

Hacktron is seeking a founding security researcher to join a small team and own security research to shape the product and company trajectory. You will help scale vulnerability research on open-source software and build benchmarks to evaluate agent performance.

You will work with engineers to improve agent efficacy and review product security, with hybrid work arrangements and global collaboration in a small, high-ownership environment.

Qualifications

• Strong understanding of reachability analysis / taint tracking.
• Good understanding of web application vulnerabilities, and CVEs.
• Presented technical security research at conferences.
• Experience with traditional and LLM tools to aid security research.

Responsibilities

• Work with a founder to scale vulnerability research on open-source software.
• Create benchmarks to evaluate agent performance on real-world scenarios.
• Collaborate with engineering to improve agent efficacy on real systems.
• Review and test products and internal systems for security vulnerabilities.

Skills

Reachability analysis & taint tracking

Web app vulnerabilities (CVEs)

Security research presentations

LLM tools

Tools

LLM tools

Job description

Founding Member of Technical Staff (Security)

San Francisco • Singapore • Hyderabad • London

Engineering

Hybrid

Full-time

We're looking for a founding security researcher to join us to build the future of security. Apply only if you’re deeply motivated by building in a small team, high ownership, high impact environment where your code will directly define the product and the company’s trajectory.

Hacktron is building security products that empower teams building the software of tomorrow. We joined Project Europe's first cohort in July, raised our Seed round in January, and are continuing the grow, fast.

What you'll do

Your work will be central to our security research efforts and play a key role in testing LLM capabilities on real-world software. You will:

• Work closely with one of the founders to scale our vulnerability research on open-source software, building on the work we've published in our blog.
• Create benchmarks to evaluate agent performance on real-world scenarios.
• Work closely with the engineering team to improve the efficacy of our agents by observing their performance on real systems.
• Review and test our product and internal systems for security vulnerabilities.

What we're looking for

This is not an exhaustive list, nor are they strict requirements. If you meet at least 2 of the following criteria, please apply. We believe that frameworks can be learnt and are therefore framework-agnostic when evaluating past experience.

• You have a strong understanding of reachability analysis / taint tracking.
• You have a good understanding of web application vulnerabilities, and have demonstrated this through CTF competitions or being credited for the discovery of CVEs.
• You have presented technical security research at conferences.
• You have experience working with both traditional and LLM tools to aid your security research.

How we work

We're a hybrid team because we believe that the best talent can come from anywhere. We use Deel for payroll, allowing us to hire both employees and contractors in any country in the world. We give you a WeWork All Access Pass which covers desk bookings at any WeWork office around the world. You can use it to work in-person with other team members in the same city, but it is not mandatory - just get work done.

You can participate in our Project Europe offsites which happen about once every 2 months.

Compensation

The base pay range for this role is $100,000 - $150,000 per year.