Security Researcher: AI-Driven Vulnerability Discovery (Remote)

Zeropath

United States

Remote

USD 140,000 - 180,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Zeropath is seeking a security researcher to audit open-source and client code, validate AI-assisted findings, and strengthen scanning rules. You will blend manual review with vulnerability triage, contribute to CVE processes, and publish research to advance secure coding practices.

You'll work remotely within the United States on impactful projects across languages like Python, JavaScript/TypeScript, Go, Java, and C/C++.

Qualifications

At least 3 years of experience in app security research, pentesting, or red teaming.
Proven success disclosing vulnerabilities via CVEs, bug bounties, or published research.
Strong knowledge of OWASP risks, authorization bypasses, injection, and business-logic flaws.
Ability to analyze source code in Python, JavaScript/TypeScript, Go, Java, or C/C++.
Experience with static analysis concepts, code review, and auditing.
Strong written communication for technical reports.

Responsibilities

Investigate software projects and customer codebases for security vulnerabilities across languages.
Validate and prioritize scanner findings, distinguishing genuine issues from false positives.
Write vulnerability reports and coordinate responsible disclosure and CVE assignment.
Refine detection rules, heuristics, and prompt strategies based on research results.
Collaborate with engineers to improve detection of authorization and business-logic flaws.
Contribute research write-ups for public-facing security publications.