Cybersecurity Research Expert, Offensive Security & Vulnerability Research

Help evaluate frontier AI systems on real-world cybersecurity challenges, including security reasoning, vulnerability analysis, exploit development, and secure software engineering. This remote opportunity is designed for accomplished offensive security researchers with publicly recognized technical contributions. Key Responsibilities

• Assess AI-generated analyses of complex cybersecurity scenarios, exploits, and vulnerability reports.
• Review technical writeups for accuracy, exploitability, and quality of proposed mitigations.
• Validate vulnerability root-cause analysis across software, operating systems, networks, cloud environments, and web applications.
• Provide structured feedback on security reasoning, exploit chains, and defensive recommendations.
• Contribute to benchmarks for advanced AI cybersecurity capabilities.

Candidates should bring multiple of the following credentials:

• Competitive achievements as a member of a top-ranked Capture The Flag team.
• Discovery or co-authorship of CVEs affecting widely used open-source or commercial software.
• Publicly recognized bug bounty findings accepted by major programs, such as Google, Microsoft, Apple, Meta, GitHub, Mozilla, Chromium, Kubernetes, or the Linux Foundation.
• Research experience with a respected security laboratory, academic research group, university security group, KAIST Security Lab, SSLab, or an equivalent industry research organization.
• High-quality security research publications, conference papers, or widely cited technical writeups.
• Strong knowledge of exploit development, reverse engineering, binary analysis, vulnerability research, operating systems, networks, web security, or cryptography.

• Professional experience in offensive security, application security, vulnerability research, product security, or security engineering.
• Experience with IDA Pro, Ghidra, Binary Ninja, Radare2, or similar reverse-engineering tools.
• Familiarity with fuzzing, symbolic execution, static analysis, or dynamic analysis frameworks.
• Experience with Linux or Windows internals, browser, cloud, embedded, or mobile security.
• Strong programming ability in C/C++, Rust, Python, Go, or Java.
• Excellent written communication skills and the ability to explain complex security concepts clearly.

• Hall of Fame recognition from major bug bounty programs.
• Presentations or publications at Black Hat, DEF CON, USENIX Security, IEEE S&P, ACM CCS, NDSS, or similar conferences.
• Maintainer or significant contributor to a well-known open-source security tool.
• Offensive Security certifications such as OSCP, OSEP, or OSCE3, GIAC certifications, or equivalent credentials.

• Remote, hourly engagement.
• Collaborate with leading researchers on advanced security evaluation work and help shape AI systems for cybersecurity.

$200 to $250 per hour.