Cybersecurity Researcher, Offensive Security & Vulnerability Research

Evaluate advanced AI systems by applying deep offensive security expertise to vulnerability analysis, exploit development, secure software engineering, and security reasoning. This role focuses on validating AI-generated technical findings, improving exploit and mitigation assessments, and helping build benchmarks for AI security capabilities. Ideal for practitioners with a proven record of offensive security research and public technical contributions.

• Assess AI-generated analyses of complex cybersecurity scenarios, including exploits and vulnerability reports.
• Review technical writeups for correctness, exploitability, and the quality of proposed mitigations.
• Validate root-cause analyses across software, operating systems, networking, cloud, and web applications.
• Provide structured, actionable feedback on security reasoning, exploit chains, and defensive recommendations.
• Contribute to the development of benchmarks and evaluation criteria for advanced AI security capabilities.

Candidates should have multiple of the following achievements or experiences:

• Member of a top-ranked Capture The Flag team with demonstrable competitive achievements.
• Discoverer or co-author of CVEs affecting widely used open-source or commercial software.
• Publicly recognized bug bounty researcher with accepted findings at major programs such as Google, Microsoft, Apple, Meta, GitHub, Mozilla, Chromium, Kubernetes, or the Linux Foundation.
• Research experience at a well-respected security laboratory or academic research group, for example KAIST Security Lab, SSLab, university security groups, or equivalent industry research organizations.
• Author of security research publications, conference papers, or widely cited technical writeups.
• Strong understanding of exploit development, reverse engineering, binary analysis, vulnerability research, operating systems, networks, web security, or cryptography.

• Professional experience in offensive security, application security, vulnerability research, product security, or security engineering.
• Familiarity with reverse engineering tools such as IDA Pro, Ghidra, Binary Ninja, or Radare2.
• Experience with fuzzing, symbolic execution, static analysis, or dynamic analysis frameworks.
• Experience with Linux internals, Windows internals, browser security, cloud security, embedded security, or mobile security.
• Strong programming skills in C/C++, Rust, Python, Go, or Java.
• Excellent written communication and the ability to explain complex security concepts clearly.

• Hall of Fame recognition from major bug bounty programs.
• Presentations or publications at Black Hat, DEF CON, USENIX Security, IEEE S and P, ACM CCS, NDSS, or similar conferences.
• Maintainer or significant contributor to well-known open-source security tools.
• Offensive Security certifications such as OSCP, OSEP, OSCE3, GIAC certifications, or equivalent credentials.

• Location: Remote.
• Employment type: Hourly engagement.

Pay range: 200 to 250 hourly.

No specific work-authorization or sponsorship details were provided in the source material. Candidates should ensure they can legally work under the stated remote hourly engagement model.

• Work on frontier AI models addressing real-world cybersecurity problems.
• Collaborate with leading researchers on advanced security evaluation tasks.
• Influence the development of next-generation AI systems for cybersecurity.