Security Researcher

Requirements:
What Youll Do
Conduct deep technical research across codebases, architectures, integrations, data flows, permissions, and agentic workflows to identify product security risks that traditional scanners often miss.
Investigate how AI coding agents, LLM-based workflows, and AI-assisted engineering practices change the way security risks are introduced, missed, prioritized, and remediated.
Turn research into useful outputs, including product recommendations, customer-facing guidance, technical writeups, evaluation ideas, talks, and internal briefs.
Maintain and evolve our companys threat-pattern corpus, security context modules, and research-backed detection logic.
Work with product and engineering to translate findings into shipped capabilities, evals, onboarding materials, and go-to-market narratives.
What Were Looking For
Strong application or product security expertise, with the ability to reason across code, architecture, product behavior, and business context.
A track record of owning research end-to-end: defining questions, doing deep technical work, forming a point of view, and producing useful artifacts.
Strong threat modeling judgment, with experience using frameworks such as OWASP, STRIDE, or similar methodologies to identify and assess common AppSec risks.
Heavy hands-on use of AI coding agents, LLM-based development workflows, or AI-assisted software engineering tools in real-world engineering/research environments.
Strong communication skills, curiosity, independence, and the ability to turn research into outcomes that influence product, engineering, customers, or the market.