Staff Security Researcher – Offensive AI

Job not on LinkedIn

🕒 September 25

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

💵 $225k - $300k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 2%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Open for 46 days.
• Jobs at this company usually fill in 44 days.

Apply Now

Find Similar Remote Jobs

The Browser Company

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2019

💼 Consulting

📣 Marketing

💰 $13M Series A on 2021-05

Consulting • Marketing • Software

The Browser Company is a software development firm focused on creating a new web browser named Arc. They aim to transform the user experience of browsing the internet by designing a browser that enhances focus, organization, and control, addressing the shortcomings of traditional browsers that have remained unchanged for years. With a team of experienced engineers and designers from notable tech companies, they are innovating in the space of web browsing for a more collaborative and efficient online experience.

📋 Description

• Run original offensive research against Dia, its agent, and backend services • Investigate prompt injection and indirect exfiltration, tool-call abuse, permission and provenance bypass, sandbox escape, cross-profile data access, and quota and abuse-scoring bypass • Threat model new surface areas with product teams and review features before launch • Design and build automated vulnerability discovery, including model-driven code and infrastructure scanning, fuzzing harnesses, and agentic hunting pipelines • Collaborate with engineers to eliminate vulnerability classes and make issues structurally difficult to reintroduce • Define the standard for security testing before features ship • Survey commercial scanning services, frontier models, and open-source security models and deploy them against the codebase, infrastructure, and agent runtime • Plan and run regular AI-assisted red-team exercises and build attack corpora and harnesses • Shape pre-launch reviews for tools, integrations, agent capabilities, enterprise controls, and platform expansion • Report to the Head of Security and work across client, infrastructure, and product engineering

🎯 Requirements

• 8+ years in offensive security — vulnerability research, exploit development, red teaming, or product security testing — with a record of finding real bugs in software other people had already reviewed • Depth in at least one hard surface: LLM agent systems, browser or Chromium internals, OS sandboxing and native clients, or backend and cloud infrastructure — and the excitement to learn the rest • Practical fluency using LLMs as instruments, not just as targets, plus a working sense of when their output is noise • Production-quality coding in one or more of Go, TypeScript, Python, or Swift • Ability to write findings engineers act on and stay in the fix conversation without owning remediation • Ability to thrive in a high-trust, high-ambiguity environment • Resonance with company values • Primarily focused on hiring in North American time zones • 4+ hours of overlap with team members in Eastern Time Zone

🏖️ Benefits

• Base salary, equity, and comprehensive benefits • Best-in-class benefits designed to support you, your family, and your life outside of work • Remote-first, distributed team • Option to work from the office in Brooklyn, New York • Startup-style impact, ownership, and ways of working

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume