Security Researcher

About Us We are a well-funded security startup in San Francisco, founded by the teams who led Microsoft's vulnerability mitigation efforts and Tesla's offensive research. (If still in stealth, keep this line as-is; if launched, name Pi and use the standard boilerplate.) Lead Security Researcher Location: San Francisco, CA or Israel Type: Full-time, onsite About Us We are a well-funded security startup in San Francisco, founded by the teams who led Microsoft's vulnerability mitigation efforts and Tesla's offensive research. (If still in stealth, keep this line as-is; if launched, name Pi and use the standard boilerplate.) We're building a platform that changes how companies handle security vulnerabilities - not by finding more of them, but by understanding them deeply enough to fix them at the root and keep whole classes from coming back. The hard problems behind that - what to detect, how to prove a finding is real, how to remediate the way a senior engineer would - are research problems. That's where you come in. The Role You will lead security research at the company. This is not a bug-hunting role. Your job is to invent the novel approaches that become product capabilities: new ways to detect, triage, and remediate vulnerabilities using LLMs and program analysis, proven on real data before customers ever see them. You own the path from idea to shipped capability - forming the hypothesis, building the proof of concept, measuring whether it actually works, and partnering with engineering until it's in the product. You also own the quality bar: the benchmarks and evaluations that decide whether what we ship is good enough to put in front of customers. You'll set the research agenda, not just execute one. As the team grows, you'll shape how research works here. What You’ll Own The research agenda. Identify where novel approaches can meaningfully beat the state of the art in vulnerability detection, triage, and remediation - and decide what we pursue and what we kill. No one hands you a backlog. Novel approaches, proven and shipped. Build proofs of concept for new detection and remediation techniques, validate them against real-world code and data, and carry the winners through to production with engineering. You're accountable for ideas becoming product, not staying research. The quality bar. Design the datasets, benchmarks, and evaluation pipelines that measure precision, coverage, and false-positive rates. Nothing reaches customers past a bar you haven't signed off on - and if quality slips, you catch #J-18808-Ljbffr