Member of Technical Staff (Security)

Hacktron; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work

Coworking memberships

European offsites

Equity

Health, Vision, and Dental Insurance

Job summary

Hacktron in the United States is seeking a researcher to study and test security tools that evaluate how AI agents identify vulnerabilities in real software. You will merge hands-on vulnerability research with benchmark design and product testing in a small, high-ownership team.

You’ll collaborate with research and engineering colleagues across international locations, expanding vulnerability research on open-source software and creating benchmarks to measure agent performance on security tasks.

Qualifications

• Demonstrated strength in at least two relevant areas.
• Understanding of reachability analysis or taint tracking.
• Knowledge of web application vulnerabilities demonstrated through security competitions or discoveries.
• Experience presenting technical security research at conferences.
• Experience using both conventional security tools and language-model-based tools in research.

Responsibilities

• Expand vulnerability research on open-source software, including work alongside a founder.
• Create realistic benchmarks to measure agent performance on security tasks.
• Observe agents operating on real systems and use findings to improve their effectiveness.
• Assess products and internal systems for security weaknesses.
• Share research findings with engineering to inform product development.

Skills

Reachability analysis

Taint tracking

Web application vulnerabilities

Security research presentations

LM-based security tools

Conventional security tools

Job description

Role overview

Research and test security tools that assess how well AI agents identify vulnerabilities in real software. You'll combine hands-on vulnerability research with benchmark design and product testing, working closely with research and engineering colleagues in a small, high-ownership team.

Responsibilities

• Expand vulnerability research on open-source software, including work alongside a founder.
• Create realistic benchmarks to measure agent performance on security tasks.
• Observe agents operating on real systems and use findings to improve their effectiveness.
• Assess products and internal systems for security weaknesses.
• Share research findings with engineering to inform product development.

Requirements

• Demonstrated strength in at least two relevant areas; the listed criteria are flexible rather than strict prerequisites.
• Understanding of reachability analysis or taint tracking.
• Knowledge of web application vulnerabilities, demonstrated through security competitions or credited vulnerability discoveries.
• Experience presenting technical security research at conferences.
• Experience using both conventional security tools and language-model-based tools in research.

Benefits and work setup

• Full-time, hybrid role with teammates in several international locations; in-person coworking is optional.
• Payroll arrangements support employees or contractors in multiple countries, and coworking memberships are provided.
• Optional European team offsites take place about every two months.
• Competitive salary, meaningful equity, and health, vision, and dental insurance.