Vulnerability Research Engineer

What You’ll Own

• Build production systems for AI-driven vulnerability research and exploit development.
• Develop tooling for vulnerability discovery, triage, reproduction, and validation at scale.
• Work across OS internals, binaries, runtimes, kernels, dynamic analysis, instrumentation, and low-level performance.
• Partner with vulnerability researchers, security operators, and engineers to automate manual cyber workflows.
• Own problems end-to-end, from research and design to shipped production code.

Requirements

• 2+ years of vulnerability research, offensive security, or low-level engineering experience. Exceptional new grads with strong CTF, systems, or exploitation work will be considered.
• Hands-on experience with reverse engineering, binary analysis, exploit development, fuzzing, dynamic analysis, bug hunting, CTFs, or comparable low-level security work.
• Deep low-level systems fluency, including OS internals, kernels, runtimes, memory corruption, debugging, dynamic instrumentation, or performance-sensitive systems.
• Strong builder mindset and ability to ship reliable tools and production systems.
• Comfortable working in ambiguity and moving fast.
• Willing to relocate to Washington DC after an initial period, with full relocation support. The role is expected to be in-office 5 days per week.

Nice to Have

• Strong CTF background, especially pwn, rev, kernel, browser, or systems-heavy challenges.
• Published vulnerability research, CVEs, exploit writeups, or security talks.
• Experience with fuzzing, symbolic execution, emulation, program analysis, or binary rewriting.
• Open-source contributions to low-level security, reversing, debugging, tracing, fuzzing, or OS tooling.
• Exposure to ML / AI systems, especially applied to code, binaries, security automation, or program analysis.
• Early-stage startup, founder, or early-engineer experience.

What We Look For

• Strong vulnerability research instincts.
• Low-level technical depth.
• Builder mindset — able to turn research workflows into scalable systems.
• Comfort with ambiguity, speed, and high ownership.
• Motivation to help build a category-defining company in AI-native offensive cyber.