Cybersecurity Researcher for AI Security Evaluation

Apply advanced offensive security expertise to evaluate and validate AI-generated security analyses, exploit development reasoning, and vulnerability research across software, operating systems, networking, cloud, and web platforms. This role focuses on hands-on technical validation, high-quality feedback, and contributing to benchmarks that measure AI capabilities in security reasoning and exploitability assessment.

• Evaluate AI-generated analyses of complex cybersecurity scenarios, exploits, and vulnerability reports.
• Review technical writeups for correctness, exploitability, and quality of mitigations.
• Validate root-cause analysis for vulnerabilities across software, operating systems, networking, cloud, and web applications.
• Provide structured, actionable feedback on security reasoning, exploit chains, and defensive recommendations.
• Contribute to the design and development of benchmarks for advanced AI security capabilities.

Candidates should hold multiple of the following credentials or experiences.

• Member of a top-ranked Capture The Flag team with demonstrated competitive achievements.
• Discoverer or co-author of CVEs affecting widely used open-source or commercial software.
• Publicly recognized bug bounty researcher with findings accepted by major programs such as Google, Microsoft, Apple, Meta, GitHub, Mozilla, Chromium, Kubernetes, or the Linux Foundation.
• Research experience at a well-respected security laboratory or academic research group, for example university security research groups or established industry research organizations.
• Author of security research publications, conference papers, or widely cited technical writeups.
• Strong understanding of exploit development, reverse engineering, binary analysis, vulnerability research, operating systems, networks, web security, or cryptography.

• Professional experience in offensive security, application security, vulnerability research, product security, or security engineering.
• Experience with reverse engineering tools such as IDA Pro, Ghidra, Binary Ninja, or Radare2.
• Familiarity with fuzzing, symbolic execution, static analysis, or dynamic analysis frameworks.
• Experience with Linux internals, Windows internals, browser security, cloud security, embedded security, or mobile security.
• Strong programming skills in C/C++, Rust, Python, Go, or Java.
• Excellent written communication and ability to explain complex security concepts clearly.

• Hall of Fame recognition from major bug bounty programs.
• Presentations or publications at Black Hat, DEF CON, USENIX Security, IEEE S&P, ACM CCS, NDSS, or similar conferences.
• Maintainer or significant contributor to widely used open-source security tools.
• Offensive Security certifications such as OSCP, OSEP, OSCE3, GIAC certifications, or equivalent credentials.

• Work on frontier AI models addressing real-world cybersecurity problems.
• Collaborate with leading researchers on advanced security evaluation tasks.
• Help shape the next generation of AI systems for cybersecurity.

• Location: Remote.
• Employment type: hourly.

Pay rate: 200 - 250 hourly.

No specific work-authorization or visa sponsorship details were specified in the source. Applicants should ensure they are able to work remotely under the applicable laws and regulations for their location.