Offensive Security Research Engineer

Tolmo; San Francisco (CA); Sur place; USD 150 000 - 210 000; Plein temps

Avantages offerts par ce poste

Competitive salary

Early-stage equity

Comprehensive medical, dental, and视on

In-person at San Francisco office

Résumé du poste

Tolmo in San Francisco is hiring a Research Engineer on Offensive Security to push our agents to attack like top red teams and then improve. You’ll research how real systems break, translate that knowledge into techniques, tooling, and evaluations, and validate them in real customer environments.

Reporting between research and engineering, you’ll reproduce exploit classes, chain vulnerabilities, and build harnesses and tests.

Qualifications

• Deep hands-on offensive security experience: penetration testing, red teaming, exploit development, or vulnerability research.
• A track record that shows it: CVEs, bug bounty results, CTF wins, published research, or talks.
• Strong engineering skills: production-quality code in Go, TypeScript, or Python and building reusable tools.
• Understanding of modern apps and cloud architectures and how they fail: auth, IAM, SSRF, injections.

Responsabilités

• Exploit research across web apps, APIs, cloud, CI/CD, and identity to enable field-use capabilities.
• Attack-path discovery: reason about how minor weaknesses chain into real impact.
• Red-team tooling: build scanners, probes, sandboxes, and exploitation helpers.
• Evals and benchmarks: design environments to measure agent success and minimize false positives.
• Field validation: review agent findings from customer engagements and improve test cases.
• Staying ahead: track CVEs and attacker tradecraft and push into the product.

Description du poste

Tolmo in San Francisco is hiring a Research Engineer on Offensive Security to push our agents to attack like top red teams and then improve. You’ll research how real systems break, translate that knowledge into techniques, tooling, and evaluations, and validate them in real customer environments.

Reporting between research and engineering, you’ll reproduce exploit classes, chain vulnerabilities, and build harnesses and tests.