Research
Member of Technical Staff, Vulnerability Researcher
Status: Open
- Pay
- $150,000–$200,000/yr
- Location
- Remote
- Employment type
- Full-time
- Openings
- 1
- Posted
- 2026-07-20
About this opportunity
Job Title: Member of Technical Staff, Vulnerability Researcher
Job Type: Full-time
Location: Remote
The Role
We're building AI systems that push the frontier of what software can do. As a Member of Technical Staff, Vulnerability Research, you'll operate like an internal adversary—discovering novel attack paths before anyone else does. You'll research emerging threats across AI agents, cloud infrastructure, developer platforms, and production systems, partnering closely with engineering to make our stack fundamentally more resilient.
What You'll Do
- Conduct advanced offensive security research across cloud infrastructure (AWS, GCP), production services, internal tooling, and AI platforms.
- Design and execute realistic adversary simulations targeting identity systems, cloud control planes, supply chains, and distributed architectures.
- Discover and exploit vulnerabilities across proprietary applications, APIs, infrastructure-as-code, CI/CD pipelines, and AI-powered developer workflows.
- Research emerging attack vectors against LLMs, AI agents, retrieval systems, MCP integrations, prompt orchestration, and autonomous workflows.
- Reverse engineer critical services to uncover architectural weaknesses, novel exploitation techniques, and previously unknown vulnerability classes.
- Simulate insider and advanced persistent threat scenarios, evaluating privilege escalation, lateral movement, and defense evasion techniques across modern enterprise environments.
- Build custom offensive tooling, automation frameworks, fuzzers, and proof-of-concept exploits to accelerate vulnerability discovery.
- Partner closely with infrastructure, product, and AI engineering teams to validate fixes, improve secure-by-design practices, and raise the overall security bar.
- Publish internal research, document attack methodologies, and help shape long-term security strategy.
What We're Looking For
- Proven experience in offensive security, vulnerability research, red teaming, or exploit development.
- Deep understanding of cloud security across AWS and GCP, including IAM, networking, Kubernetes, containers, and identity systems.
- Strong background in application security, code auditing, reverse engineering, and vulnerability discovery.
- Experience identifying weaknesses across modern software supply chains, CI/CD systems, APIs, and infrastructure automation.
- Proficiency in Python, Go, Rust, C/C++, or similar languages used for security research and offensive tooling.
- Strong understanding of operating system internals, networking, authentication protocols, and modern security architectures.
- Ability to independently investigate ambiguous problems and develop novel attack techniques.
- Excellent written communication skills with the ability to explain complex vulnerabilities to engineering teams.
Preferred
- Experience researching AI/LLM security, including agentic systems, prompt injection, tool abuse, indirect prompt attacks, jailbreaks, model manipulation, RAG security, or autonomous workflows.
- Experience discovering zero-day vulnerabilities, developing exploits, or contributing to offensive security research.
- Published CVEs, conference talks, blog posts, open-source security tooling, or participation in bug bounty programs.
- Experience with macOS internals, endpoint security, virtualization, or hardware-backed security technologies.
- Familiarity with fuzzing, symbolic execution, binary analysis, or compiler security.
- Contributions to the broader security research community.
Compensation & Benefits Notice
The national pay range for this full-time position is base salary of $150,000 –$200,000. All employees are eligible for equity compensation, and employees may also receive performance-based bonuses, dependent on role and subject to company policies. micro1 provides a comprehensive benefits package, including up to 100% reimbursement for health-insurance premiums, paid time off, a 401(K) plan with a company match, and additional benefits designed to support a high-performing, remote-first workforce.
micro1 is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation during the application process, reach out to support@micro1.ai.
Our hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making.
Disclaimer
The information contained in this job posting, including but not limited to role responsibilities, qualifications, compensation, and benefits, is provided for informational purposes only and does not constitute a binding offer of employment. micro1 reserves the right to amend, modify, or withdraw any portion of this posting at its sole discretion and without prior notice. All employment decisions are made in accordance with applicable laws and regulations.
Required skills
- Multi-Cloud Exploitation
- Red Teaming
- Strategic Remediation
- Control Validation
What you'll do
- Conduct advanced offensive security research across cloud infrastructure (AWS, GCP), production services, internal tooling, and AI platforms.
- Design and execute realistic adversary simulations targeting identity systems, cloud control planes, supply chains, and distributed architectures.
- Discover and exploit vulnerabilities across proprietary applications, APIs, infrastructure-as-code, CI/CD pipelines, and AI-powered developer workflows.
- Research emerging attack vectors against LLMs, AI agents, retrieval systems, MCP integrations, prompt orchestration, and autonomous workflows.
- Reverse engineer critical services to uncover architectural weaknesses, novel exploitation techniques, and previously unknown vulnerability classes.
- Simulate insider and advanced persistent threat scenarios, evaluating privilege escalation, lateral movement, and defense evasion techniques across modern enterprise environments.
- Build custom offensive tooling, automation frameworks, fuzzers, and proof-of-concept exploits to accelerate vulnerability discovery.
- Partner closely with infrastructure, product, and AI engineering teams to validate fixes, improve secure-by-design practices, and raise the overall security bar.
- Publish internal research, document attack methodologies, and help shape long-term security strategy.
Requirements
- Proven experience in offensive security, vulnerability research, red teaming, or exploit development.
- Deep understanding of cloud security across AWS and GCP, including IAM, networking, Kubernetes, containers, and identity systems.
- Strong background in application security, code auditing, reverse engineering, and vulnerability discovery.
- Experience identifying weaknesses across modern software supply chains, CI/CD systems, APIs, and infrastructure automation.
- Proficiency in Python, Go, Rust, C/C++, or similar languages used for security research and offensive tooling.
- Strong understanding of operating system internals, networking, authentication protocols, and modern security architectures.
- Ability to independently investigate ambiguous problems and develop novel attack techniques.
- Excellent written communication skills with the ability to explain complex vulnerabilities to engineering teams.
Preferred qualifications
- Experience researching AI/LLM security, including agentic systems, prompt injection, tool abuse, indirect prompt attacks, jailbreaks, model manipulation, RAG security, or autonomous workflows.
- Experience discovering zero-day vulnerabilities, developing exploits, or contributing to offensive security research.
- Published CVEs, conference talks, blog posts, open-source security tooling, or participation in bug bounty programs.
- Experience with macOS internals, endpoint security, virtualization, or hardware-backed security technologies.
- Familiarity with fuzzing, symbolic execution, binary analysis, or compiler security.
- Contributions to the broader security research community.
Compensation
The national pay range for this full-time position is base salary of $150,000 –$200,000. All employees are eligible for equity compensation, and employees may also receive performance-based bonuses, dependent on role and subject to company policies. micro1 provides a comprehensive benefits package, including up to 100% reimbursement for health-insurance premiums, paid time off, a 401(K) plan with a company match, and additional benefits designed to support a high-performing, remote-first workforce.