Source Job

• Lead the design and development of an AI-driven exploit discovery and productization system.
• Coordinate efforts of engineers and security researchers to ensure quality quarterly deliveries.
• Collaborate across teams to integrate existing targeting data and tools for mission needs.

Clarity Innovations is a trusted national security partner that empowers the Intelligence Community and Department of Defense with innovative software and data engineering solutions. They are a people-focused company committed to being a destination employer for top talent, offering an environment where innovation thrives.

• Investigate sophisticated threats across Android, iOS, and HarmonyOS Next to develop innovative protections.
• Conduct reverse engineering, vulnerability research, exploitation, and penetration testing.
• Take ownership of research projects while mentoring junior researchers and influencing technical direction.

Our partner is a Product Security team focused on cutting-edge mobile cybersecurity research and advanced threat defense. The environment is fast-moving, highly technical, collaborative, and designed for researchers who enjoy solving complex security problems.

• Conduct cutting-edge security research on GitLab's AI-powered DevSecOps capabilities, including the Duo Agent Platform and GitLab Duo Chat, to identify and validate vulnerabilities before they impact the platform or customers.
• Develop novel testing methodologies and perform hands-on penetration testing, translating emerging threats into actionable security improvements for the next generation of AI-powered DevSecOps tools.
• Collaborate with engineering teams to define security requirements, build tooling and automation for scalable security research, and mentor other team members in security best practices.

GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. With more than 50 million registered users and over 50% of the Fortune 100 as customers, GitLab fosters a high-performance culture driven by values and continuous knowledge exchange.

• Investigate emerging vulnerabilities across the Ubuntu ecosystem, helping identify, assess, remediate, and document security issues.
• Collaborate with internal engineering teams, upstream developers, and the broader open source community to deliver robust security fixes.
• Contribute to security initiatives across the broader open source ecosystem and engage with industry communities.

They are a globally distributed security engineering team dedicated to protecting users and strengthening the security of open source software. The environment is highly technical, collaborative, and international, with opportunities to share knowledge through open source contributions and industry events.

• Manage a novel vulnerabilities pipeline, owning measurement, disclosure, and reporting of thousands of vulnerabilities weekly.
• Coordinate across the industry with bodies like the Linux Foundation and CISA, and represent Chainguard externally.
• Guide industry direction and work with AI model vendors to evolve software supply chain security.

Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. The company is venture-backed by leading investors and serves Fortune 500 enterprises and global industry leaders.

• Perform vulnerability scanning support within approved scope and toolsets.
• Coordinate patching prioritization and tracking with responsible teams.
• Develop recurring vulnerability and patching reports for operational and executive stakeholders.

EVOCS is an IT consulting firm that helps businesses operate more effectively through practical expertise and technology solutions. The company is a trusted partner to a growing number of organizations, with a team focused on quality, consistency, and client success.

• Embed security expertise within software engineering teams to influence product design and development.
• Combine software engineering with proactive security practices like threat modeling, static analysis, and fuzzing.
• Work extensively with Linux and open source technologies, contributing to upstream projects and strengthening security.

They are a leading open source software company behind Ubuntu, providing secure and scalable solutions. They operate with a globally distributed team, emphasizing collaboration and continuous learning.

• Triage and validate incoming security vulnerability submissions for Bugcrowd managed programs.
• Communicate directly with clients and researchers to clarify submission details and escalate critical bugs.
• Maintain strong knowledge of OWASP Top Ten vulnerabilities and use interception proxies like Burp Suite.

We empower organizations to stay ahead of threat actors by uniting customers and elite hackers with our AI-powered Security Knowledge Platform. We are backed by General Catalyst and other investors, and our team is diverse and inclusive.

• Hunt through first-party data and telemetry to identify and expose new malicious cyber activity and campaigns.
• Cluster, track, attribute, and disrupt malicious cyber threats with advanced tradecraft.
• Develop and integrate new intelligence sources, tools, and systems to produce a comprehensive threat picture.

GreyNoise Intelligence is a mission driven security startup focused on helping organizations understand and mitigate risks from Internet scanning and exploitation. It is a high-growth Series-A startup with a remote-first culture emphasizing transparency, honesty, and continuous learning.

• Lead the enterprise Vulnerability Management and CDM program, directing scanning and prioritization strategies.
• Coordinate remediation activities across system owners, engineering teams, and ISSOs to reduce cyber risk.
• Develop executive metrics, dashboards, and reports to communicate vulnerability posture and operational risk trends.

True Zero Technologies is a veteran-owned small business that focuses on purposeful enablement of people and technology. Recognized as a Best Places to Work in 2023 and 2025, and listed on the Inc. 5000 fastest-growing companies, the company emphasizes a people-first culture and dedication to excellence.