Principal Security Researcher

Responsibilities

Our talent team is representing a confidential DevSecOps organization seeking a Principal Security Researcher to conduct cutting-edge security research on AI-powered development platforms. You will be at the forefront of security research, working with next-generation AI workflows and collaborative development tools.

In this role, you will:

• Conduct and lead security research projects across multiple functional areas
• Identify novel, systemic, and chained vulnerabilities where individual weaknesses combine for outsized impact
• Validate security vulnerabilities through hands-on testing, developing proof-of-concept exploits that demonstrate real-world attack scenarios
• Assess emerging industry vulnerability classes and drive remediation of the class rather than the instance
• Lead security research into AI and agentic surfaces, defining security requirements for engineering teams
• Build and direct tooling and automation that scales security research, including agent-assisted vulnerability discovery
• Research the security posture of open source tools and dependencies, reporting findings to maintainers and tracking mitigation
• Solve technical problems of the highest scope, complexity, and ambiguity
• Help shape team and departmental roadmaps
• Lead the integration of security research results into engineering and business functions
• Teach, mentor, and advise other domain experts and individual contributors across several teams
• Share knowledge and novel vulnerability types with the security community

What We're Looking For

Required qualifications:

• 10+ years of experience in security research, penetration testing, or offensive security roles
• Strong ability in discovering and exploiting vulnerabilities in large codebases and complex systems
• Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust
• Ability to read and analyze code across multiple languages and codebases
• Strong knowledge of AI frameworks
• Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation
• At ease in establishing and driving complex remediation initiatives involving cross-functional teams
• Excellent written communication skills with an ability to articulate complex topics in a clear and concise manner
• Ability to translate complex technical findings into clear risk assessments and remediation recommendations
• Strong analytical and problem-solving skills with creative thinking about attack scenarios

Nice to have:

• Published security research or conference presentations
• Background in software engineering with distributed systems expertise
• Experience with DevSecOps platforms

How We Work with You

When you apply through Get A Job.ai, here's what happens:

• You submit your application on our platform at getajob.ai
• One of our specialized recruiters conducts an initial screening to understand your background and career goals
• We prepare and submit your profile to our client organization
• We coordinate the interview process and provide guidance throughout
• Please do not contact the client directly—all communication flows through our recruiting team to ensure the best experience for you

This is a remote position reporting to the Senior Manager of Application Security. You'll join an Application Security team focused on systemic product security risks, working cross-functionally to mitigate them while maintaining development velocity.

Pay

This role does not have compensation information available at this time through Get A Job.ai. Pay details will be discussed during the screening process with our recruiting team.

Equal Employment Opportunity: Get A Job.ai is committed to fair and equitable recruiting practices. We welcome candidates from all backgrounds and experience levels. Studies show that candidates from underrepresented groups are less likely to apply unless they meet every qualification—if you're excited about this role, we encourage you to apply and let our team assess your fit.