Staff Security Researcher – Offensive AI

Job not on LinkedIn

🔥 13 hours ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

💵 $225k - $300k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

The Browser Company

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2019

💼 Consulting

📣 Marketing

💰 $13M Series A on 2021-05

Consulting • Marketing • Software

The Browser Company is a software development firm focused on creating a new web browser named Arc. They aim to transform the user experience of browsing the internet by designing a browser that enhances focus, organization, and control, addressing the shortcomings of traditional browsers that have remained unchanged for years. With a team of experienced engineers and designers from notable tech companies, they are innovating in the space of web browsing for a more collaborative and efficient online experience.

📋 Description

• Run original offensive research against Dia, its agent, and backend services • Investigate prompt injection and indirect exfiltration, tool-call abuse, permission and provenance bypass, sandbox escape, cross-profile data access, and quota and abuse-scoring bypass • Threat model new surface areas with product teams and review features before launch • Design and build automated vulnerability discovery, including model-driven code and infrastructure scanning, fuzzing harnesses, and agentic hunting pipelines • Collaborate with engineers to eliminate vulnerability classes and make issues structurally difficult to reintroduce • Define the standard for security testing before features ship • Survey commercial scanning services, frontier models, and open-source security models and deploy them against the codebase, infrastructure, and agent runtime • Plan and run regular AI-assisted red-team exercises and build attack corpora and harnesses • Shape pre-launch reviews for tools, integrations, agent capabilities, enterprise controls, and platform expansion • Report to the Head of Security and work across client, infrastructure, and product engineering

🎯 Requirements

• 8+ years in offensive security — vulnerability research, exploit development, red teaming, or product security testing — with a record of finding real bugs in software other people had already reviewed • Depth in at least one hard surface: LLM agent systems, browser or Chromium internals, OS sandboxing and native clients, or backend and cloud infrastructure — and the excitement to learn the rest • Practical fluency using LLMs as instruments, not just as targets, plus a working sense of when their output is noise • Production-quality coding in one or more of Go, TypeScript, Python, or Swift • Ability to write findings engineers act on and stay in the fix conversation without owning remediation • Ability to thrive in a high-trust, high-ambiguity environment • Resonance with company values • Primarily focused on hiring in North American time zones • 4+ hours of overlap with team members in Eastern Time Zone

🏖️ Benefits

• Base salary, equity, and comprehensive benefits • Best-in-class benefits designed to support you, your family, and your life outside of work • Remote-first, distributed team • Option to work from the office in Brooklyn, New York • Startup-style impact, ownership, and ways of working