Senior Offensive AI Security Researcher

The Browser Company; United States; Remote; USD 225,000 - 300,000; Full time

Benefits offered by this job

Best-in-class benefits

Remote-friendly company

Office in Brooklyn, NY

Job summary

The Browser Company is seeking a Staff Security Researcher to drive offensive security research on Dia, its agent, and backend services. You will help threat model new surfaces, design automation for vulnerability discovery, and work with engineers to eliminate bug classes with robust, durable fixes.

The role emphasizes production-grade code in Go/TypeScript/Python/Swift, and requires 8+ years in security with strong QA mindset.

Qualifications

• 8+ years in offensive security — vulnerability research, exploit development, red teaming, or product security testing.
• Depth in at least one hard surface: LLM agent systems, browser or Chromium internals, OS sandboxing and native clients, or backend and cloud infrastructure.
• Practical fluency using LLMs as instruments, not just as targets.
• You write production-quality code in Go, TypeScript, Python, or Swift.
• You write findings engineers act on and push for durable fixes.
• You thrive in a high-trust environment with minimal hand-holding.
• You resonate with our company values.
• We require 4+ hours of overlap with Eastern Time Zone.

Responsibilities

• Run original offensive research against Dia including the client, agent runtime, tools and integrations it calls, and services behind them.
• Threat model new surface areas with the teams building them, and review features before they ship.
• Design and build automated vulnerability discovery: model-driven scanning, fuzzing harnesses, and agentic hunting pipelines.
• Eliminate entire classes of bugs in collaboration with engineers, making issues hard to reintroduce via invariants and platform changes.
• Set the standard for what 'security tested' means before a feature ships.

Skills

Offensive security

Threat modeling

Code in Go/TS/Python/Swift

LLM/agent systems

Browser/Chromium internals

OS sandboxing

Cloud infrastructure

Bug discovery tooling

Tools

Go

TypeScript

Python

Swift

Job description

The Browser Company is seeking a Staff Security Researcher to drive offensive security research on Dia, its agent, and backend services. You will help threat model new surfaces, design automation for vulnerability discovery, and work with engineers to eliminate bug classes with robust, durable fixes.

The role emphasizes production-grade code in Go/TypeScript/Python/Swift, and requires 8+ years in security with strong QA mindset.