Senior Offensive Security Researcher (Remote)

The Browser Company; United States; Remote; USD 180,000 - 280,000; Full time

Benefits offered by this job

Two offers: salary or equity

Full medical insurance

20+ days vacation; generous parental/p

Job summary

The Browser Company in the United States seeks a Staff Security Researcher to drive original offensive security work on the Dia platform, its client, agent runtime, and backend services. You will model threats, design scalable scanning and fuzzing systems, and collaborate with engineers to implement durable, structural fixes.

You will focus on prompt injection, tool-call abuse, sandbox bypass, and data access risks while staying ahead of product roadmaps and security reviews.

Qualifications

• 8+ years in offensive security, vulnerability research, or red teaming.
• Experience finding real bugs in complex software stacks.
• Strong understanding of browser internals and OS sandboxing.
• Proven ability to design exploit tests and secure remediation plans.

Responsibilities

• Perform original offensive security research against Dia client, agent runtime, and backend services.
• Design and run model-driven scanning, fuzzing, and agentic hunting pipelines.
• Threat model new surfaces with product teams and review features before shipping.
• Collaborate with engineers to ensure durable fixes and prevent regressions.
• Lead regular red team exercises and build reusable attack datasets.

Skills

Vulnerability research

Red teaming

Offensive security

Product security testing

LLM agent systems

Browser internals

OS sandboxing

Go

TypeScript

Python

Swift

Job description

The Browser Company in the United States seeks a Staff Security Researcher to drive original offensive security work on the Dia platform, its client, agent runtime, and backend services. You will model threats, design scalable scanning and fuzzing systems, and collaborate with engineers to implement durable, structural fixes.

You will focus on prompt injection, tool-call abuse, sandbox bypass, and data access risks while staying ahead of product roadmaps and security reviews.