Senior/Staff Security Researcher

As a Senior/Staff Security Researcher, you will drive impactful research initiatives focused on improving automated security detection and developer workflows. You will combine security expertise, programming skills, and applied AI knowledge to build scalable solutions that help organizations identify real vulnerabilities with greater accuracy and confidence.

• Design and develop security workflows combining program analysis techniques, automated detection, and AI-powered reasoning to identify vulnerabilities across multiple languages and frameworks.
• Build reliable AI-assisted security systems, including agentic workflows, evaluation frameworks, and automation pipelines focused on accuracy, scalability, and trust.
• Research and model vulnerability classes, security properties, and detection methodologies to create reusable security intelligence.
• Develop benchmarks and evaluation processes based on real-world codebases to measure and improve detection quality.
• Investigate complex security challenges involving application vulnerabilities, supply-chain risks, authentication issues, and emerging threats.
• Create prototypes and technical solutions in collaboration with engineering and product teams to validate new security capabilities.
• Analyze unfamiliar technologies, frameworks, and programming environments to understand potential security risks and detection opportunities.
• Share research findings through technical writing, presentations, workshops, and community contributions.
• Provide technical leadership by defining research priorities and helping advance security practices across the organization.

Requirements:

The ideal candidate combines strong application security expertise with a passion for building scalable tools and solving complex technical problems. You should be comfortable working independently, exploring ambiguous challenges, and translating security knowledge into practical solutions.

• Extensive experience in application security, security research, security engineering, or related technical roles.
• Strong understanding of common vulnerability classes and how they appear across different programming languages and frameworks.
• Proven ability to identify vulnerabilities, assess their impact, and communicate remediation guidance effectively.
• Strong programming experience with the ability to build tools, prototypes, and security automation solutions in multiple languages.
• Experience with applied AI technologies, including LLM workflows, prompt engineering, retrieval-augmented generation, AI agents, or evaluation methodologies.
• Experience designing or operating AI/agent-based systems in production environments is highly valuable.
• Ability to understand and apply program analysis concepts such as static analysis, taint analysis, data flow, or code intelligence techniques.
• Strong problem-solving skills with the ability to take ownership of complex, open-ended projects.
• Excellent communication skills and the ability to collaborate with technical and non-technical stakeholders.
• Curiosity and willingness to continuously learn new technologies, programming languages, and security techniques.

Preferred qualifications:

• Experience with SAST tools, security automation platforms, or application security products.
• Background in compilers, abstract syntax trees, intermediate representations, call graphs, or related program analysis fields.
• Familiarity with cloud-native technologies, distributed systems, workflow platforms, or graph databases.
• Experience contributing security research through publications, talks, workshops, or open-source projects.
• Experience training, fine-tuning, or evaluating language models for security or code-related applications.
• Experience working in fast-paced technology environments with a strong ownership mindset.

Benefits:

• Competitive salary range of $190,000 - $319,000 USD, depending on location and experience.
• Equity opportunities and comprehensive benefits package in addition to base compensation.
• Remote-friendly work environment with flexibility depending on location.
• Opportunity to work on cutting-edge challenges involving application security and artificial intelligence.
• Access to complex real-world security problems and large-scale technology environments.
• Collaboration with experienced engineers, researchers, and security professionals.
• Support for professional growth, learning, and career development.
• Benefits programs designed to support employee well-being and long-term success.