Security Researcher

Responsibilities

• Build technology capable of finding novel vulnerabilities at scale in both open source and proprietary codebases
• Develop techniques to reduce false positives using automated exploitation, proof of concept generation, and context inference
• Collaborate closely with engineers to understand system limitations and design new methodologies for improvement
• Publish internal technical reports and contribute to security advisories as needed

Requirements

• 3+ years of full-time experience in security research, offensive security, or related fields
• Proven experience finding vulnerabilities in source code
• Experience creating PoC exploits for vulnerabilities
• Proficiency in Python
• Bachelor's degree in Computer Science, Software Engineering, or equivalent industry experience

Preferred Qualifications

• Strong intuition for identifying, analyzing, and investigating application vulnerabilities
• Ability to solve complex problems with simple, scalable solutions
• Passion for working at the intersection of AI, Security, and Infrastructure

Benefits

• Competitive salary with meaningful equity
• Health, vision, and dental insurance
• Office lunch (when working from our San Francisco office)

About the Company

depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-day vulnerabilities across large customer codebases and popular open source software. Our founding team includes technical leaders from DeepMind, Databricks, Square, and Faire.