AppSec Engineer
- Role
- Security
- Employment
- Full-time
Open to US, CA only. Set where you work from to check your eligibility.
No BS summary
We're looking for a hands-on Cyber Security Engineer to sit at the intersection of AI-driven tooling and real-world security research.
We're looking for a hands-on Cyber Security Engineer to sit at the intersection of AI-driven tooling and real-world security research. In this role, you'll own the end-to-end triage and validation lifecycle for vulnerability reports generated by our AI-powered static analysis platform, separating true positives from noise, writing proof-of-concept exploits, and reporting vulnerabilities upstream to the appropriate vendor.
This is a deeply technical role built for someone who thinks like an attacker, thrives in ambiguous environments, and has a track record of finding and exploiting vulnerabilities.
WHAT YOU'LL DO
- Triage and validate vulnerability reports produced by our AI static analysis tool, verifying severity, exploitability, and business impact
- Write proof-of-concept exploits for critical vulnerabilities to confirm true positives
- Analyze false positives to identify patterns and provide structured feedback to engineering
- Author detailed vulnerability reports that will be submitted to upstream vendors and open source projects
WHAT WE'RE LOOKING FOR
- Experience in a security engineering, vulnerability research, or penetration testing role
- Demonstrated CTF experience through participation in competitive CTFs (e.g. DEFCON, PlaidCTF) with writeups
- Hands-on real-world vulnerability research and exploitation experience is preferred
- Proficiency reading and auditing code across multiple programming languages
- Prior bug bounty participation is preferred
- Based in US or Canada
What you'll do
- Triage and validate vulnerability reports produced by our AI static analysis tool, verifying severity, exploitability, and business impact
- Write proof-of-concept exploits for critical vulnerabilities to confirm true positives
- Analyze false positives to identify patterns and provide structured feedback to engineering
- Author detailed vulnerability reports that will be submitted to upstream vendors and open source projects
What they require
- Experience in a security engineering, vulnerability research, or penetration testing role
- Demonstrated CTF experience through participation in competitive CTFs (e.g. DEFCON, PlaidCTF) with writeups
- Proficiency reading and auditing code across multiple programming languages
- Preferred: Hands-on real-world vulnerability research and exploitation experience
- Preferred: Prior bug bounty participation