Security Researcher for AI-Powered Vulnerability Discovery

depthfirst Inc.; San Francisco (CA); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Competitive Salary with meaningful équ

Health, Vision, and Dental Insurance

Office lunch (SF office)

Job summary

depthfirst seeks an experienced Security Researcher to build and train AI-enabled vulnerability discovery and exploitation agents. You will explore novel attack vectors, analyze codebases, and collaborate with AI researchers to advance detection and defense capabilities.

The team aims to redefine security for customers and open source projects alike. You will work with engineers to refine methodologies, publish internal reports, and contribute to a product used by several customers to remediate

Qualifications

• 3+ years of full-time experience in security research, offensive security, or related fields.
• Experience with finding vulnerabilities in source code
• Experience creating PoC exploits for vulnerabilities
• Programming in Python
• A bachelor's degree in Computer Science/Software Engineering or equivalent industry experience
• A love for technology, and an insatiable curiosity for new tools to tackle real problems
• Capable of solving complex problems with simple solutions. Building reliable and scalable products, making right trade-offs along the way
• A tendency to leave things in a better way than you found it

Responsibilities

• Build a technology capable of finding novel vulnerabilities at scale in open source and proprietary codebases.
• Develop techniques to reduce false positives leveraging automated exploitation, PoC generation, and context inference.
• Work closely with engineers to understand limitations and design new methodologies to improve our system.
• Publish internal technical reports and contribute to security advisories as needed.
• Work on a Product that solves a critical problem and has already shown value for customers.

Skills

Python programming

Vulnerability research

PoC exploits

Source code analysis

Problem solving

Education

Bachelor's degree in Computer Science or Software Engineering

Tools

PoC tooling

Job description

depthfirst seeks an experienced Security Researcher to build and train AI-enabled vulnerability discovery and exploitation agents. You will explore novel attack vectors, analyze codebases, and collaborate with AI researchers to advance detection and defense capabilities.

The team aims to redefine security for customers and open source projects alike. You will work with engineers to refine methodologies, publish internal reports, and contribute to a product used by several customers to remediate