Senior/Staff Security Researcher

Accountabilities

• Drive impactful research initiatives focused on improving automated security detection and developer workflows.
• Combine security expertise, programming skills, and applied AI knowledge to build scalable solutions that help organizations identify real vulnerabilities with greater accuracy and confidence.
• Design and develop security workflows combining program analysis techniques, automated detection, and AI-powered reasoning to identify vulnerabilities across multiple languages and frameworks.
• Build reliable AI-assisted security systems, including agentic workflows, evaluation frameworks, and automation pipelines focused on accuracy, scalability, and trust.
• Research and model vulnerability classes, security properties, and detection methodologies to create reusable security intelligence.
• Develop benchmarks and evaluation processes based on real-world codebases to measure and improve detection quality.
• Investigate complex security challenges involving application vulnerabilities, supply-chain risks, authentication issues, and emerging threats.
• Create prototypes and technical solutions in collaboration with engineering and product teams to validate new security capabilities.
• Analyze unfamiliar technologies, frameworks, and programming environments to understand potential security risks and detection opportunities.
• Share research findings through technical writing, presentations, workshops, and community contributions.
• Provide technical leadership by defining research priorities and helping advance security practices across the organization.

Requirements

• Strong application security expertise with a passion for building scalable tools and solving complex technical problems.
• Extensive experience in application security, security research, security engineering, or related technical roles.
• Strong understanding of common vulnerability classes and how they appear across different programming languages and frameworks.
• Proven ability to identify vulnerabilities, assess their impact, and communicate remediation guidance effectively.
• Strong programming experience with the ability to build tools, prototypes, and security automation solutions in multiple languages.
• Experience with applied AI technologies, including LLM workflows, prompt engineering, retrieval-augmented generation, AI agents, or evaluation methodologies.
• Experience designing or operating AI/agent-based systems in production environments is highly valuable.
• Ability to understand and apply program analysis concepts such as static analysis, taint analysis, data flow, or code intelligence techniques.
• Strong problem-solving skills with the ability to take ownership of complex, open-ended projects.
• Excellent communication skills and the ability to collaborate with technical and non-technical stakeholders.
• Curiosity and willingness to continuously learn new technologies, programming languages, and security techniques.

Preferred Qualifications

• Experience with SAST tools, security automation platforms, or application security products.
• Background in compilers, abstract syntax trees, intermediate representations, call graphs, or related program analysis fields.
• Familiarity with cloud-native technologies, distributed systems, workflow platforms, or graph databases.
• Experience contributing security research through publications, talks, workshops, or open-source projects.
• Experience training, fine-tuning, or evaluating language models for security or code-related applications.
• Experience working in fast-paced technology environments with a strong ownership mindset.

Benefits

• Competitive salary range of $190,000 - $319,000 USD, depending on location and experience.
• Equity opportunities and comprehensive benefits package in addition to base compensation.
• Remote-friendly work environment with flexibility depending on location.
• Opportunity to work on cutting-edge challenges involving application security and artificial intelligence.
• Access to complex real-world security problems and large-scale technology environments.
• Collaboration with experienced engineers, researchers, and security professionals.
• Support for professional growth, learning, and career development.
• Benefits programs designed to support employee well-being and long-term success.