← All roles

Security Researcher

depthfirst· Applied Research
Apply on company site
San FranciscoFull-timePosted 6mo ago

About the role

Experienced security researcher focused on building and training AI agents for vulnerability discovery and exploitation, with emphasis on identifying novel attack vectors and reducing false positives in large codebases.

Responsibilities

  • Build a technology capable of finding novel vulnerabilities at scale both in open source and proprietary codebases
  • Develop techniques to reduce false positives leveraging automated exploitation, proof of concept generation and context inference
  • Work closely with engineers to understand limitations and design new methodologies to improve our system
  • Publish internal technical reports and contribute to security advisories as needed
  • Work on a Product that Solves a Critical Problem - and we already have a handful of customers who have found it valuable in fixing some eye-opening vulnerabilities within the first few days of using our product.

Qualifications

  • 3+ years of full-time experience in security research, offensive security, or related fields
  • Experience with finding vulnerabilities in source code
  • Experience creating PoC exploits for vulnerabilities
  • Programming experience in Python
  • A bachelor's degree in Computer Science/Software Engineering or equivalent industry experience
  • A love for technology, and an insatiable curiosity for new tools to tackle real problems
  • Capable of solving complex problems with simple solutions. Building reliable and scalable products, making right trade-offs along the way
  • A tendency to leave things in a better way than you found it

Skills

Required:Security researchVulnerability discovery in source codePoC exploit developmentPython

Benefits

  • Competitive Salary with meaningful equity
  • Health, Vision, and Dental Insurance
  • Office lunch (when working from our San Francisco office)
Last updated Jul 17, 2026. Interested? Apply on the company site.
depthfirst logo

About depthfirst

Autonomous Security from Design to Production

An AI-native platform that understands your code, business logic, and infrastructure to find more vulnerabilities, slash false positives, and give developers actionable fixes in their workflow.

SecurityAIVulnerability DetectionStatic AnalysisDynamic TestingSupply Chain Security
Company profileWebsite

More open roles at depthfirst