Offensive Security RL Researcher

idler; San Francisco (CA); On-site; USD 200,000 - 500,000; Full time

Benefits offered by this job

Healthcare

401(k)

PTO

Relocation assistance

Equity

Job summary

idler is seeking an elite security researcher who can also build. You will lead cybersecurity work, deciding environments to build, and directly collaborate with frontier AI researchers to understand needs and deliver scalable capabilities.

You will code where it matters and manage part-time experts to ensure fairness and quality. You’ll join a tight-knit team driving security evals, with in-person work in San Francisco and a base salary with meaningful equity.

Qualifications

• 3+ years in a professional cybersecurity role with top-tier reputation.
• Hands-on experience in web app pentesting, bug bounty, or AI security.
• Strong ability to write production code and ship systems.
• Well-connected in the security community for recruiting review experts.
• Ability to justify prioritization to researchers and explain findings clearly.

Responsibilities

• Drive roadmap for idler's cybersecurity evals and environments.
• Build and run production systems for environments.
• Recruit and manage part-time cybersecurity experts who review environments.
• Work with frontier AI researchers to tailor and sell capabilities.

Skills

Cybersecurity

Python

TypeScript

Communication

Mentoring

Tools

Python

TypeScript

Job description

About idler

idler is a frontier data research lab. We build the evals and environments that the world's leading frontier labs use to measure and train their models.

After raising a $9m seed round led by Paradigm, we spent the last year developing coding evals for top coding models you know and love. At the same time, we've expanded into other domains besides coding: RSI & Auto-Research, Law, Enterprise Business, Cybersecurity, and others. Now, we are facing more lab demand for our data than we can serve, and are rapidly scaling the team to grow the business.

Our approach to creating training data scales using technology, and all of our data products are built on a unified self-reinforcing platform that learns through experience.

You would be joining a close-knit team that has reached product market fit, and your work would directly help to multiply our revenue.

You can see some of our work here: https://idler.ai/collections

About the role

idler is looking for an elite security researcher who can also build. You'll lead idler's cybersecurity work: deciding which environments we build, building and running the systems that produce them, recruiting and managing the part-time experts who review them, and working directly with researchers at frontier AI labs to understand what they need and sell them what we build.

You're a security researcher first. We need someone whose judgment about what counts as a real vulnerability, what makes a task fair, and where the field's genuine skill hierarchy actually sits, we can trust without double-checking. Software development is the tool you use to put that judgment into a production pipeline - it's not a second, parallel discipline we're hiring for separately.

One note on scope: if idler stops investing in cybersecurity, you'd move to a different project inside the company rather than leave - we want to say that plainly now rather than have it be a surprise later.

What you'll do

• Drive the roadmap for idler's cybersecurity evals and environments, and decide — using our cybersecurity capability map — which environments we build next and where we put engineering resources.

• Build and run the systems that produce those environments yourself; you'll write production code where it matters, not just spec it out for someone else to build.

• Recruit, onboard, and manage the part-time cybersecurity experts who review our environments for fairness, correctness, and quality.

• Work directly with researchers at frontier AI labs to understand what cybersecurity capabilities and data they want, and sell them the environments that meet it.

Requirements

• 3+ years of experience in a professional cybersecurity role, with a track record that puts you in the top 5% of your peers by reputation.

• Deep hands-on experience in at least one of: web app pentesting, bug bounty hunting, vulnerability/zero-day research, hacking agents, or AI security.

• Well-connected within the security community - this makes recruiting and evaluating the part-time experts you'll manage far easier.

• Comfortable writing and shipping production code (Python, TypeScript, or similar). You don't need a decade of software engineering experience, but you need to build and maintain the systems your research depends on, not hand that off entirely.

• Strong written communication - you'll justify prioritization calls to researchers and explain findings to people who didn't do the work themselves.

You might excel if you...

• Have a public bug bounty track record, live-hacking-event invitations, Pwn2Own placements, or published original research - send us a writeup of some of the best bugs you've ever found.

• Have managed or mentored other security researchers or hackers before.

• Have thought seriously about how to measure or grade security work that isn't simply pass/fail.

• Have built tools or automation to support your own research, even if you wouldn't call yourself a software engineer.

Details

• In-person in San Francisco

• $200K-$500K base salary + meaningful equity.

• We'd sponsor and co-publish AI security research under your name.

• Healthcare, 401(k), 15 days of PTO per year.

• Relocation assistance

• Small, ambitious team.

We're a tight-knit founding team and we play to win. Join us if you like to win too.