Senior Offensive AI Security Researcher — Remote

The Browser Company; Williamsburg (VA); Remote; USD 225,000 - 300,000; Full time

Benefits offered by this job

Remote-friendly

Office Williamsburg option

Equity

Job summary

The Browser Company is hiring a Staff Security Researcher to advance offensive security of the Dia browser. You will investigate agent runtimes, client, and backend surfaces, modeling threats before features reach users.

You will build automated discovery and hunting pipelines, collaborate with engineers on durable fixes, and help define what it means for a feature to be security-tested at scale.

Qualifications

• 8+ years in offensive security with a track record of finding real bugs.
• Depth in at least one hard surface: LLM agent systems, browser/Chromium internals, OS sandboxing, or backend/cloud infra.
• Fluency using LLMs as tools, not just targets.
• Writes production-quality code in Go, TypeScript, Python, or Swift.
• Documents findings clearly for engineers to act on and drive durable fixes.
• Thrives in a high-trust, high-ambiguity environment and welcomes feedback.
• Able to overlap 4+ hours with Eastern Time Zone.

Responsibilities

• Run original offensive research against Dia, its agent, and backend services, focusing on prompt injection and data access risks.
• Model new surfaces with product teams and review features before release.
• Design automated vulnerability discovery including code and infrastructure scanning.
• Eliminate bug classes in collaboration with engineers to harden the system.
• Set security testing standards and raise the team’s capability.

Skills

Offensive security

Vulnerability research

Red teaming

Go

TypeScript

Python

Swift

Threat modeling

LLM tooling

Browser internals

OS sandboxing

Backend/cloud

Production code

Tools

Git

CI/CD

Job description

The Browser Company is hiring a Staff Security Researcher to advance offensive security of the Dia browser. You will investigate agent runtimes, client, and backend surfaces, modeling threats before features reach users.

You will build automated discovery and hunting pipelines, collaborate with engineers on durable fixes, and help define what it means for a feature to be security-tested at scale.