Security Researcher
- Location
- San Francisco, CA · On-site
- Job type
- Full-time
- Level
- Senior
- Experience
- 3+ years
- Education
- Bachelor's degree
- Listed
- 22 days ago
Skills & highlights for this role
- vulnerability discovery
- proof-of-concept exploit development
- source code vulnerability analysis
Also useful
- Python
Stated benefits & perks
- Health
- Vision
- Dental
About this role
We’re seeking an experienced Security Researcher to join our effort in building and training AI agents for vulnerability discovery and exploitation.
We are building a technology capable of finding the next Log4J at scale, finding and remediating vulnerabilities in customer and open source codebases.
We are looking for strong security researchers with strong intuition to identify, analyze, and investigate application vulnerabilities. You’ll collaborate with AI researchers and engineers to uncover novel attack vectors and contribute to the development of advanced detection and defense capabilities. Your work will play a crucial role in building a product that aims to redefine how companies do security.
You’re excited about this role because you will
- Build a technology capable of finding novel vulnerabilities at scale both in open source and proprietary codebases
- Develop techniques to reduce false positives leveraging automated exploitation, proof of concept generation and context inference
- Work closely with engineers to understand limitations and design new methodologies to improve our system
- Publish internal technical reports and contribute to security advisories as needed.
- Work on a Product that Solves a Critical Problem - and we already have a handful of customers who have found it valuable in fixing some eye-opening vulnerabilities within the first few days of using our product.
Qualifications
- 3+ years of full-time experience in security research, offensive security, or related fields.
- Experience with finding vulnerabilities in source code
- Experience creating PoC exploits for vulnerabilities
- Programming experience in Python
- A bachelor's degree in Computer Science/Software Engineering or equivalent industry experience
- A love for technology, and an insatiable curiosity for new tools to tackle real problems
- Capable of solving complex problems with simple solutions. Building reliable and scalable products, making right trade-offs along the way
- A tendency to leave things in a better way than you found it
What We Offer
- Competitive Salary with meaningful equity
- Health, Vision, and Dental Insurance
- Office lunch (when working from our San Francisco office) depthfirst is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
To all recruitment agencies: depthfirst does not accept agency resumes. Please do not forward resumes to depthfirst employees. depthfirst is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.
About DepthFirst
We believe that software is the foundation of modern civilization - yet vulnerabilities threaten its integrity, security, and resilience. We are on a mission to solve security.
depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-days vulnerabilities across large customer codebases and popular open source software.
Our founding team includes deep expertise in data, infrastructure, security and LLMs with technical leaders from DeepMind, Databricks, Square, and Faire. We are looking for strong technical people who are interested in working at the intersection of AI, Security, and Infrastructure.
From DepthFirst's careers page, first listed on Rolev.ai on October 17, 2026. Rolev.ai is not the employer.
How Rolev.ai helps with this application
Rolev.ai is a job search and application tool for US job seekers. For this Security Researcher role at DepthFirst, it shows how your resume fits, tailors your resume to the posting, and prepares the application for you to review.
See how you fit
Openings from employer career sites are ranked against your whole resume—and searchable inside Claude, ChatGPT, and Cursor via Rolev.ai MCP.
Tailor without inventing
Every change to your resume is checked against your original. New experience goes in only with your yes—zero fabricated claims.
Draft the full kit
Tailored and Full Match resumes, role-specific cover letters, and answers to employer screening questions are prepared in seconds.
1-Click Extension Autofill
The Chrome extension fills the employer's Greenhouse, Workday, Lever, or Ashby form in 1 click. You review it and press Submit.
Common questions
Where is the Security Researcher job at DepthFirst located?
This Security Researcher position at DepthFirst is located in San Francisco, CA (On-site). Always check DepthFirst's application page for specific state eligibility or relocation policies.
What qualifications are required for Security Researcher at DepthFirst?
For the Security Researcher role, DepthFirst highlights 3+ years of relevant experience; a bachelor's degree; experience with vulnerability discovery, proof-of-concept exploit development, source code vulnerability analysis. Rolev.ai can score your existing resume against these requirements and show any skill gaps before you apply.
How do I apply for the Security Researcher position at DepthFirst?
This listing links directly to DepthFirst's Ashby application page. You can apply directly on DepthFirst's site, or use Rolev.ai to check your resume fit, generate a zero-hallucination tailored resume and cover letter for this posting, and autofill the Ashby application form in 1 click with the Rolev.ai Chrome extension. You always review the form and press Submit yourself.