Member Of Technical Staff, Vulnerability Researcher

Artha Nexgen; Northern (KY); Hybrid; USD 150,000 - 200,000; Full time

Job summary

micro1 is seeking a Member of Technical Staff, Vulnerability Researcher to advance offensive security across AI systems, cloud infrastructure, and internal tooling. You will operate like an internal adversary, researching threats and proposing resilient designs with engineering teams.

You will conduct adversary simulations, reverse engineer critical services, and develop custom tooling to accelerate vulnerability discovery.

Qualifications

• Proven experience in offensive security, vulnerability research, red teaming, or exploit development.
• Deep understanding of cloud security across AWS and GCP, IAM, networking, Kubernetes, containers, and identity systems.
• Strong background in application security, code auditing, reverse engineering, and vulnerability discovery.
• Experience identifying weaknesses across modern software supply chains, CI/CD systems, APIs, and infrastructure automation.
• Excellent written communication skills for explaining complex vulnerabilities to engineering teams.

Responsibilities

• Conduct advanced offensive security research across cloud infrastructure and AI platforms.
• Design and execute adversary simulations targeting identity systems and cloud control planes.
• Discover and exploit vulnerabilities in apps, APIs, and CI/CD pipelines.
• Research attack vectors against LLMs, AI agents, retrieval systems, and autonomous workflows.
• Reverse engineer critical services to identify weaknesses and exploitation techniques.
• Simulate insider threats and lateral movement across enterprise environments.
• Build tooling, fuzzers, and PoCs to accelerate vulnerability discovery.
• Collaborate with infrastructure, product, and AI engineering to validate fixes.
• Publish internal research and help shape security strategy.

Skills

Offensive security

Vulnerability research

Red teaming

Exploit development

Python

Go

Rust

C/C++

Cloud security

Kubernetes

Security tooling

Job description

Member Of Technical Staff, Vulnerability Researcher

US

Contract $7-8

Offensive security Vulnerability research Reverse engineering Fuzzing Exploit development

This job requires a minimum of 3 years of experience.

About the Job

Job Title: Member of Technical Staff, Vulnerability Researcher

Job Type: Full-time

Location: Remote

The Role

We're building AI systems that push the frontier of what software can do. As a Member of Technical Staff, Vulnerability Research, you'll operate like an internal adversary—discovering novel attack paths before anyone else does. You'll research emerging threats across AI agents, cloud infrastructure, developer platforms, and production systems, partnering closely with engineering to make our stack fundamentally more resilient.

What You'll Do

• Conduct advanced offensive security research across cloud infrastructure (AWS, GCP), production services, internal tooling, and AI platforms.
• Design and execute realistic adversary simulations targeting identity systems, cloud control planes, supply chains, and distributed architectures.
• Discover and exploit vulnerabilities across proprietary applications, APIs, infrastructure-as-code, CI/CD pipelines, and AI-powered developer workflows.
• Research emerging attack vectors against LLMs, AI agents, retrieval systems, MCP integrations, prompt orchestration, and autonomous workflows.
• Reverse engineer critical services to uncover architectural weaknesses, novel exploitation techniques, and previously unknown vulnerability classes.
• Simulate insider and advanced persistent threat scenarios, evaluating privilege escalation, lateral movement, and defense evasion techniques across modern enterprise environments.
• Build custom offensive tooling, automation frameworks, fuzzers, and proof-of-concept exploits to accelerate vulnerability discovery.
• Partner closely with infrastructure, product, and AI engineering teams to validate fixes, improve secure-by-design practices, and raise the overall security bar.
• Publish internal research, document attack methodologies, and help shape long-term security strategy.

What We're Looking For

• Proven experience in offensive security, vulnerability research, red teaming, or exploit development.
• Deep understanding of cloud security across AWS and GCP, including IAM, networking, Kubernetes, containers, and identity systems.
• Strong background in application security, code auditing, reverse engineering, and vulnerability discovery.
• Experience identifying weaknesses across modern software supply chains, CI/CD systems, APIs, and infrastructure automation.
• Proficiency in Python, Go, Rust, C/C++, or similar languages used for security research and offensive tooling.
• Strong understanding of operating system internals, networking, authentication protocols, and modern security architectures.
• Ability to independently investigate ambiguous problems and develop novel attack techniques.
• Excellent written communication skills with the ability to explain complex vulnerabilities to engineering teams.

Preferred

• Experience researching AI/LLM security, including agentic systems, prompt injection, tool abuse, indirect prompt attacks, jailbreaks, model manipulation, RAG security, or autonomous workflows.
• Experience discovering zero-day vulnerabilities, developing exploits, or contributing to offensive security research.
• Published CVEs, conference talks, blog posts, open-source security tooling, or participation in bug bounty programs.
• Experience with macOS internals, endpoint security, virtualization, or hardware-backed security technologies.
• Familiarity with fuzzing, symbolic execution, binary analysis, or compiler security.
• Contributions to the broader security research community.

Compensation & Benefits Notice

The national pay range for this full-time position is base salary of $150,000 –$200,000. All employees are eligible for equity compensation, and employees may also receive performance-based bonuses, dependent on role and subject to company policies. micro1 provides a comprehensive benefits package, including up to 100% reimbursement for health-insurance premiums, paid time off, a 401(K) plan with a company match, and additional benefits designed to support a high-performing, remote-first workforce.

micro1 is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation during the application process, reach out to [e-mail].

Our hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making.

Disclaimer

The information contained in this job posting, including but not limited to role responsibilities, qualifications, compensation, and benefits, is provided for informational purposes only and does not constitute a binding offer of employment. micro1 reserves the right to amend, modify, or withdraw any portion of this posting at its sole discretion and without prior notice. All employment decisions are made in accordance with applicable laws and regulations.