Description
We are looking for a Senior Offensive Security Researcher with an attacker mindset to discover, analyze, and remediate security vulnerabilities across our products and platforms.
The Experience You will work alongside and influence engineering teams to shape design decisions, improve security posture, and advance overall application security maturity.
Responsibilities
- Lead offensive security assessments (manual testing, code review, architectural analysis, threat modeling) across application ecosystems.
- Identify critical, high-impact, and systemic vulnerabilities alongside isolated issues.
- Drive security research to identify emerging attack vectors, abuse cases, and bypass techniques relevant to our applications and platforms.
- Partner closely with software engineers, tech leads, and architects to: Explain risk, impact, and exploitability. Design and implement effective remediations. Ensure fixes are scalable, maintainable, and aligned with engineering realities.
- Lead Secure by Default initiatives by: Applying security guardrails, patterns, and baseline controls. Remediating insecure defaults and unsafe configurations. Preventing vulnerabilities through platform-level and framework-level updates.
- Influence application and platform designs early in the development lifecycle to prevent vulnerabilities before release.
- Set and apply security standards, best practices, and architectural guidance during application development.
- Mentor engineers and peers by sharing security knowledge and offensive techniques.
- Collaborate with detection, monitoring, and incident response teams to improve visibility into real-world exploitation.
Requirements
- 7+ years of experience in Application Security or Offensive Security with an attacker mindset.
- Demonstrated experience independently finding and remediating vulnerabilities in complex applications.
- Deep understanding of: Web application security (OWASP Top 10 and beyond) Authentication & authorization flaws API security Injection attacks, logic flaws, and access control bypasses Secure design and threat modeling.
- Hands-on experience with manual security testing (beyond automated tools).
- Ability to translate complex security findings into clear, actionable guidance for engineers and technical leadership.
- Strong communication and collaboration skills, with a track record of influencing engineering teams.
Benefits
- Time off programs
- Medical, dental, vision
- Mental health support
- Paid parental leave
- Life and disability insurance
- 401(k)
- Employee stock purchasing program