Vulnerability Researcher

New York City, NY

• On-site
• Full-time Compensation: $220,000–$350,000 + competitive equity

About The Company

Our client builds AI systems that autonomously perform vulnerability research against real targets, collapsing a manual process that once took roughly six months into a matter of days using coordinated agents. It sells exclusively to governments and is backed by tier-1 US venture firms. The team is approaching 20 people and scaling toward 30, with alumni from leading AI labs and national-security organizations.

Founded 2025

• :11–50 people (Seed)
• Industry: Security / Offensive Cyber

The Role

The client is hiring multiple Vulnerability Researchers to help design and build agentic systems that autonomously find vulnerabilities across firmware, network stacks, mobile operating systems, and IoT. It's deeply technical, low-level work — wiring emulation, instrumentation, fuzzing, and exploit primitives into tool interfaces that agents can operate. Vulnerability research must be the central, primary function of the day-to-day, not a secondary responsibility.

Tech stack: C / C++ / Rust; GDB, IDA, Ghidra; QEMU, Unicorn, Qiling, PANDA, FirmAE; Frida, DynamoRIO; Linux (kernel internals, system-level debugging); fuzzing pipelines; modern mitigations (ASLR, CFI, PAC, MTE); agent harnesses / orchestration / eval loops.

Requirements

• Vulnerability research as the primary function of your current role
• Strong reverse-engineering and debugger skills (GDB, IDA, or Ghidra)
• 2–3+ years of C, C++, or Rust systems programming
• Deep Linux systems fluency
• On-site in NYC five days a week; relocation required
• US citizen or clearance-eligible (preferred)

Nice to Haves

• Exploit-weaponization experience
• An offensive-security-firm background
• A competitive CTF background or public CVEs
• A genuine technical interest in AI agents
• A startup-suitable culture fit

Why Join

• A frontier mission: build AI agents that autonomously run offensive vulnerability research against real firmware, network stacks, mobile OSes, and IoT — compressing six months of manual work into days
• An elite team drawn from leading AI labs and national-security organizations
• Real customers, real stakes: government clients, tier-1 US VC backing, seed stage with meaningful equity upside
• Deeply technical, low-level work at the intersection of offensive security and AI-agent infrastructure

Details

• Location — New York City, NY
• Work policy — On-site, 5 days/week; relocation required
• Compensation — $220,000–$350,000 + competitive equity
• Visa sponsorship — Not available; US citizen or clearance-eligible preferred. Applicants from restricted countries cannot be considered.
• Employment type — Full-time