Sr Staff Security Researcher (AI-Assisted Vulnerability Research)

Location: Santa Clara, California, United States of America; most teams work from the office full time

Salary: $139,600–$225,775 per year, with possible restricted stock units and bonus

Company

hirify.global operates in cybersecurity and develops technologies for protecting digital systems, with a focus on AI-assisted security research and vulnerability discovery.

What you will do

• Design, build, and improve AI and security harnesses for vulnerability discovery, validation, exploitability analysis, and reporting.
• Conduct deep technical research across real-world software and open-source projects using fuzzing, reverse engineering, root-cause analysis, patch analysis, and proof-of-concept validation.
• Build reusable research infrastructure, including target setup automation, AI agent workflows, benchmark environments, validation oracles, triage pipelines, and reporting workflows.
• Use LLMs, AI agents, static and dynamic analysis, program analysis, and security automation to improve research quality, speed, coverage, and reliability.
• Analyze large-scale harness outputs, crash clusters, validation traces, false positives, patch comparisons, and target patterns.
• Produce technical reports, benchmarks, responsible disclosures, open-source tools, CVEs, and other research artifacts where appropriate.

Requirements

• Master’s degree in Computer Science, Cybersecurity, or a related technical field, or equivalent practical experience.
• At least 5 years of experience in vulnerability research, offensive security research, reverse engineering, fuzzing, exploit development, program analysis, security automation, or a related role.
• Demonstrated ability to independently drive technical research from problem formulation through implementation, evaluation, and written results.
• Original security research or high-signal technical output, such as CVEs, responsible disclosures, security papers, fuzzers, harnesses, exploit analyses, benchmarks, or open-source security tools.
• Strong programming skills and knowledge of operating systems, network protocols, application security, vulnerability classes, and exploitation or validation techniques.
• Strong written communication skills for documenting methods, evidence, limitations, reproduction steps, impact, and remediation guidance.

Nice to have

• PhD or equivalent demonstrated research experience in Computer Science, Cybersecurity, AI/ML, Systems, or Programming Languages.
• Experience building AI agent harnesses, fuzzing harnesses, evaluation systems, vulnerability validation workflows, patch validation pipelines, or security benchmarks.
• Experience handling vulnerabilities end to end, including responsible disclosure and maintainer communication.
• Knowledge of web, kernel, browser, software supply chain, OT/IoT, network, cloud, application, file parser, or protocol parser security.
• Public security research artifacts, conference presentations, publications, CVEs, bug bounty results, GitHub projects, or open-source security tools.

Culture & Benefits

• In-person collaboration is emphasized, with flexibility when needed.
• Employee benefits are available, with compensation potentially including restricted stock units and a bonus.
• Reasonable accommodations are available for qualified applicants.
• Immigration sponsorship is available for this role.