Member of Technical Staff, Vulnerability Researcher | $7-$8/hr Remote
Overview
A remote full-time role focused on discovering and understanding security weaknesses before attackers do. You’ll work as a technical staff member in vulnerability research, probing AI systems, cloud environments, and development pipelines to harden our platform. Expect hands-on testing, collaboration with engineering, and a chance to shape secure-by-design practices using modern security tooling and multi-cloud expertise.
What You'll Do9
- 1Perform advanced offensive security assessments across cloud platforms like AWS and GCP, production services, internal tools, and AI systems.
- 2Create and run realistic attack simulations targeting identity controls, cloud control planes, supply chains, and distributed architectures.
- 3Uncover and exploit flaws in proprietary apps, APIs, infrastructure as code, CI/CD pipelines, and AI powered developer workflows.
- 4Investigate new attack methods affecting LLMs, AI agents, retrieval systems, and autonomous workflows, then document findings for the team.
- 5Reverse engineer critical services to reveal architectural gaps and novel exploitation approaches.
- 6Model insider threat and advanced persistent threat scenarios to test privilege escalation and lateral movement.
- 7Develop custom tooling, automation, fuzzers, and PoCs to accelerate vulnerability discovery.
- 8Collaborate with infrastructure, product, and AI engineering teams to validate fixes and raise security standards.
- 9Publish internal research and contribute to long term security strategy.
Requirements8
- 1Proven track record in offensive security, vulnerability research, red teaming, or exploit development.
- 2Strong knowledge of cloud security across AWS and GCP, including IAM, networking, Kubernetes, containers, and identity systems.
- 3 Background in application security, code auditing, reverse engineering, and vulnerability discovery.
- 4Experience identifying weaknesses in modern software supply chains, CI/CD, APIs, and infrastructure automation.
- 5Proficiency in languages such as Python, Go, Rust, C/C++ or similar used for security research and tooling.
- 6Solid grasp of operating system internals, networking, authentication protocols, and security architectures.
- 7Ability to independently investigate ambiguous problems and craft novel attack techniques.
- 8Excellent written communication for explaining complex vulnerabilities to engineering teams.
Who Should Apply
The ideal candidate thrives on challenges, owns vulnerability research end to end, and communicates findings clearly to engineers. You should be comfortable operating across multi cloud environments, securing AI driven systems, and driving secure design improvements with practical impact.
Salary Insight
Base salary range for this role is $150,000–$200,000 annually, with equity opportunities and potential performance bonuses.
Location
Required Skills
Application Tip
Prepare a concise, concrete example of a previously discovered vulnerability, including your approach, impact, and how you collaborated with engineers to remediate it.
Similar open positions
Explore active roles that match your skills and interests.
Interrupt Labs
VerifiedExperienced Vulnerability Researcher Washington DC Remote
We seek an experienced vulnerability researcher who thrives in a collaborative environment. You will conduct research, develop exploits, and share knowledge across global platform teams. This role offers competitive compensation and opportunities for professional growth.
Mercor
VerifiedCybersecurity Research Expert – Offensive Security & Vulnerability Research | $200-$250/hr Remote
This remote, part-time role brings elite offensive security researchers together to stress-test and evaluate AI systems on complex security tasks. You'll review AI-generated vulnerability reports, exploit analyses, and secure-coding evaluations, then provide structured feedback that helps improve the models. The work spans multiple domains—software, OS, networking, cloud, and web—and suits practitioners with deep hands-on expertise in exploit development, reverse engineering, and vulnerability research. What sets this apart is direct involvement in shaping the next generation of AI for cybersecurity, with competitive hourly compensation.
David Joseph & Company
VerifiedSenior Staff Security Engineer
Lead the end-to-end security posture of an AI coworker product for enterprise IT teams. Own application cloud network and agent security while defining a novel category. Drive secure design reviews build security primitives and manage incident response. This is a full-time role in San Francisco with equity compensation.
Micro1
VerifiedRed Team Lead (Offensive Cybersecurity) | $50-$90/hr Remote
The Red Team Lead partners on offensive cybersecurity initiatives to strengthen critical client projects. You’ll guide realistic adversary simulations, shape how AI systems learn from real-world security data, and set standards for evaluation and ethics. Expect a remote contractor role that values deep domain expertise over AI background, with a focus on practical, measurable impact and clear communication.
Cylake-Inc
VerifiedSecurity Researcher (Detection Systems)
Join Cylake-Inc in San Jose, California for an onsite opportunity. Lead the creation of next-generation cybersecurity products from the ground up. Shape the future of threat detection while growing your career with a world-class team.
greenlight
VerifiedStaff Product Security Engineer, AI & Cloud Security
You will own end-to-end security for consumer products, a digital platform, and an emerging hardware line at Greenlight, a fintech serving 6.5 million family members. You will drive threat modeling, lead penetration testing, manage PSIRT operations, and champion secure AI adoption across the company. Collaborating with architects, product managers, and engineering, you will define security guardrails for AI-powered products and development workflows. This role offers a rare blend of hands-on technical work and strategic influence in a highly regulated financial environment.