Member of Technical Staff, Vulnerability Researcher

About this role

Job Title: Member of Technical Staff, Vulnerability Researcher We're building AI systems that push the frontier of what software can do. As a Member of Technical Staff, Vulnerability Research, you'll operate like an internal adversary—discovering novel attack paths before anyone else does. You'll research emerging threats across AI agents, cloud infrastructure, developer platforms, and production systems, partnering closely with engineering to make our stack fundamentally more resilient.

Skills

Key responsibilities

• Conduct advanced offensive security research across cloud infrastructure (AWS, GCP), production services, internal tooling, and AI platforms.
• Design and execute realistic adversary simulations targeting identity systems, cloud control planes, supply chains, and distributed architectures.
• Discover and exploit vulnerabilities across proprietary applications, APIs, infrastructure-as-code, CI/CD pipelines, and AI-powered developer workflows.
• Research emerging attack vectors against LLMs, AI agents, retrieval systems, MCP integrations, prompt orchestration, and autonomous workflows.
• Reverse engineer critical services to uncover architectural weaknesses, novel exploitation techniques, and previously unknown vulnerability classes.
• Simulate insider and advanced persistent threat scenarios, evaluating privilege escalation, lateral movement, and defense evasion techniques across modern enterprise environments.
• Build custom offensive tooling, automation frameworks, fuzzers, and proof-of-concept exploits to accelerate vulnerability discovery.
• Partner closely with infrastructure, product, and AI engineering teams to validate fixes, improve secure-by-design practices, and raise the overall security bar.
• Publish internal research, document attack methodologies, and help shape long-term security strategy.

Required skills & qualifications

• Proven experience in offensive security, vulnerability research, red teaming, or exploit development.
• Deep understanding of cloud security across AWS and GCP, including IAM, networking, Kubernetes, containers, and identity systems.
• Strong background in application security, code auditing, reverse engineering, and vulnerability discovery.
• Experience identifying weaknesses across modern software supply chains, CI/CD systems, APIs, and infrastructure automation.
• Proficiency in Python, Go, Rust, C/C++, or similar languages used for security research and offensive tooling.
• Strong understanding of operating system internals, networking, authentication protocols, and modern security architectures.
• Ability to independently investigate ambiguous problems and develop novel attack techniques.
• Excellent written communication skills with the ability to explain complex vulnerabilities to engineering teams.

Preferred qualifications

• Experience researching AI/LLM security, including agentic systems, prompt injection, tool abuse, indirect prompt attacks, jailbreaks, model manipulation, RAG security, or autonomous workflows.
• Experience discovering zero-day vulnerabilities, developing exploits, or contributing to offensive security research.
• Published CVEs, conference talks, blog posts, open-source security tooling, or participation in bug bounty programs.
• Experience with macOS internals, endpoint security, virtualization, or hardware-backed security technologies.
• Familiarity with fuzzing, symbolic execution, binary analysis, or compiler security.
• Contributions to the broader security research community.