Senior Security Researcher (Software Supply Chain Security)

Location: Remote US

Company

hirify.global develops security products for AI-generated code, software supply chains, and modern application development. Its AURI platform uses agent integrations and a code context graph to identify exploitable vulnerabilities and deliver application-safe fixes.

What you will do

• Conduct offensive security research on software supply chain threats and identify zero-day vulnerabilities.
• Develop and refine exploit techniques for attack vectors involving malicious code, third-party libraries, and CI/CD systems.
• Work with Product Management to translate research findings into security capabilities within hirify.global products.
• Collaborate with security engineers and developers to prototype detection and mitigation strategies.
• Publish findings through technical blogs, white papers, and leading security conferences.
• Develop open-source tools, methodologies, or frameworks and track emerging threats and attacker techniques.

Requirements

• 5+ years of experience in security research, vulnerability discovery, and offensive security.
• Deep expertise in reverse engineering, exploit development, and software vulnerability analysis.
• Strong understanding of software supply chain security, including package management systems, CI/CD pipelines, and dependency analysis.
• Experience discovering and responsibly disclosing zero-day vulnerabilities.
• Proven record of publishing high-quality research or presenting at leading security conferences such as Black Hat, DEF CON, RSAC, or BSides.
• Proficiency in Python, Rust, or Go.
• Strong analytical skills and the ability to conduct complex security research autonomously.
• Excellent written and verbal communication skills for conveying technical concepts to diverse audiences.

Culture & Benefits

• Work at the intersection of developer productivity and software security.
• Directly influence security capabilities for modern software supply chains.
• Environment focused on ownership, purposeful execution, data-driven decisions, and customer success.
• Culture that values learning from setbacks, kindness, candor, inclusion, and diverse perspectives.