G
Principal Security Researcher
RemoteFull-timeThreat IntelligenceEnterprise Software
Lead advanced security research for AI-powered DevSecOps products, identifying systemic vulnerabilities and translating emerging threats into practical security improvements. The role is remote and involves close collaboration with engineering and security teams.
Responsibilities
- Lead security research projects across multiple functional areas
- Identify systemic and chained vulnerabilities and validate them through hands-on testing and proof-of-concept exploits
- Assess vulnerability classes against the codebase and drive remediation at the class level
- Research AI and agentic security surfaces and define security requirements
- Build tooling and automation for scalable, agent-assisted vulnerability discovery
- Assess open-source tools and dependencies, report findings to maintainers, and track mitigation
- Integrate research findings into engineering and business workflows
- Shape the security team roadmap
- Mentor and advise security and engineering contributors
- Share vulnerability research with the security community
Requirements
- 10+ years of experience in security research, penetration testing, or offensive security
- Demonstrated ability to discover and exploit vulnerabilities in large codebases and complex systems
- Proficiency in at least two of Ruby, Go, Python, TypeScript, or Rust
- Ability to read and analyze code across multiple languages and codebases
- Strong knowledge of AI frameworks and AI attack vectors, including prompt injection, agent manipulation, and workflow exploitation
- Ability to lead complex, cross-functional remediation initiatives
- Strong written communication, analytical, problem-solving, and creative attack-scenario skills
Nice to have
- Published security research or conference presentations
- Software engineering background with distributed systems expertise
- Experience with GitLab or similar DevSecOps platforms
Benefits
- Health, financial, and well-being benefits
- Flexible paid time off
- Team member resource groups
- Equity compensation and employee stock purchase plan
- Growth and development fund
- Parental leave