← All roles

Security Researcher

Corgea· Engineering
Apply on company site
San Francisco, CA, US, Remote, US$120k - $220k + equityfull-timePosted 11mo ago

About the role

A role focused on uncovering, analyzing, and preventing vulnerabilities in modern software, involving research, design, and collaboration to develop AI-driven security solutions.

Responsibilities

  • Research and design detection methods for emerging vulnerability classes across multiple languages and frameworks.
  • Analyze source code, binaries, and AI-generated code to identify new exploit patterns and attack surfaces.
  • Collaborate with engineering team to integrate research into AI-driven security engine.
  • Conduct security evaluations of open-source and enterprise applications to validate and refine models.
  • Stay current on CVEs, exploit techniques, and security trends.

Qualifications

  • 4–8 years of experience in application security, offensive research, or secure software development.
  • Strong understanding of vulnerability classes (e.g., injection, deserialization, path traversal, auth bypass, XXE, SSRF, RCE).
  • Proficiency in Python, Java, JavaScript/TypeScript, Go, or C/C++.
  • Experience with static or dynamic analysis tools, fuzzing, or reverse engineering is a plus.
  • Curiosity about attacker behavior and AI's role in defense.
  • Comfortable working autonomously in a research-driven startup.

Skills

Required:Application securityVulnerability analysisProgramming

Benefits

  • Competitive salary and equity package (0.50% – 2.00%).
  • Work on cutting-edge AI and cybersecurity problems.
  • Collaboration with leading engineers, researchers, and security experts.
  • Flexible hybrid schedule aligned with San Francisco time.
Last updated Mar 18, 2026. Interested? Apply on the company site.
Corgea logo

About Corgea

Corgea finds, and fixes insecure code.

Corgea helps engineers ship code and not vulnerabilities. It's an AI-powered SAST, unlike traditional SAST with tons of false positives, Corgea can find vulnerabilities like business logic flaws, API vulnerabilities, and broken authentication with little false positives (<5%). It also writes security fixes for engineers to approve.

artificial-intelligencedeveloper-toolssaassecuritycybersecurity
Company profileWebsite

More open roles at Corgea