Назад
Company hidden
7 дней назад

Senior Security Engineer - Vulnerability Research

191 000 - 293 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Engineer - Vulnerability Research (AI/cybersecurity): Hunting previously unknown vulnerabilities in software and cloud services with an accent on source code review, fuzzing, exploitability analysis, and remediation guidance. Focus on building AI-driven vulnerability research workflows, maintaining threat models, and developing reliable fuzzing and security analysis tooling.

Location: Remote, US

Annual base salary: $191,000–$293,000

Company

hirify.global develops an Autonomous IT platform that provides real-time intelligence, agentic decision-making, and automated execution for IT and security operations.

What you will do

  • Identify attack surfaces and vulnerability classes, then build capabilities to discover previously unknown vulnerabilities.
  • Triage vulnerabilities, assess exploitability and business impact, and prioritize remediation.
  • Provide engineering teams with patch guidance, vulnerability reports, and working pull requests.
  • Maintain threat models for software and cloud services and use them to guide vulnerability research.
  • Evaluate frontier AI tooling and build agentic workflows for vulnerability discovery, triage, and remediation.
  • Develop and maintain fuzzing harnesses, AI skills, static analyzers, and dynamic analyzers while reducing false positives.

Requirements

  • Bachelor's degree in Computer Science, another relevant degree, or equivalent experience.
  • 5+ years of industry experience; 7+ years preferred.
  • Strong understanding of web and native application security.
  • Hands-on vulnerability research experience through source code review, manual application penetration testing, or fuzzing.
  • Expertise in assessing vulnerability severity, exploitability, and business impact.
  • Ability to read and write code in at least one of Go, C++, TypeScript/JavaScript, or Python, plus experience developing and shipping secure code.

Nice to have

  • Experience applying frontier models to vulnerability research and evaluating where AI improves results or creates noise.
  • Experience with reachability or exploitability analysis, native code security, AWS or Azure, or applied cryptography.
  • Published vulnerability research, credited CVEs, bounty findings, open-source security tooling, or conference talks.

Culture & Benefits

  • Collaborative, respectful, diverse, and inclusive work environment.
  • Medical, dental, and vision plans, including family planning benefits.
  • Health savings, flexible spending, transportation savings, and 401(k) plans with company match.
  • Equity awards, disability and life coverage, employee assistance programs, and other well-being benefits.
  • Five days of volunteer time off each year.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →