Security Researcher
- Location
- New York, NY · On-site
- Job type
- Full-time
- Level
- Senior
- Experience
- 3+ years
- Listed
- 23 days ago
Skills & highlights for this role
- web application security
- penetration testing
- Python
Also useful
- CVE research
- bug bounty
- CTF
Stated benefits & perks
- Health
- Vision
- Dental
About This Role
We're looking for a Security Researcher to push the frontier of what our AI agents can find. You will hunt for real vulnerabilities, turn your offensive-security expertise into agent skills, benchmarks, and detection strategies, and validate that Strix finds what matters in real-world targets.
You're Excited About This Role Because You Will
- Discover and exploit vulnerabilities in web applications, APIs, cloud infrastructure, and open-source software
- Encode offensive-security techniques into agent behaviors, tools, and playbooks that scale your expertise
- Build and curate vulnerable environments and benchmarks that measure real agent capability
- Analyze agent findings, separate signal from noise, and drive the false-positive rate toward zero
Qualifications
- 3+ years of hands-on offensive security experience (penetration testing, red teaming, bug bounty, or vulnerability research)
- Deep understanding of web application security, exploitation techniques, and modern attack surfaces
- Programming experience in Python or similar; comfort building your own tooling
- CVEs, published research, CTF results, or a strong bug bounty track record are a plus
- A tendency to leave things in a better way than you found them
What We Offer
- Competitive salary with meaningful equity
- Health, vision, and dental insurance
- Office lunch and dinner (when working from our New York office)
To all recruitment agencies: Strix does not accept agency resumes. Please do not forward resumes to Strix employees. Strix is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.
About Strix
We believe that software is the foundation of modern civilization, yet vulnerabilities threaten its integrity, security, and resilience. Strix is on a mission to solve security.
Strix builds autonomous AI penetration testing agents that think like attackers: discovering, validating, and helping fix real vulnerabilities across live applications, codebases, and infrastructure, continuously, not once a year. We are looking for strong technical people who want to work at the intersection of AI, security, and infrastructure.
Equal opportunity and legal notices
Strix is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
From Strix's careers page, first listed on Rolev.ai on October 17, 2026. Rolev.ai is not the employer.
How Rolev.ai helps with this application
Rolev.ai is a job search and application tool for US job seekers. For this Security Researcher role at Strix, it shows how your resume fits, tailors your resume to the posting, and prepares the application for you to review.
See how you fit
Openings from employer career sites are ranked against your whole resume—and searchable inside Claude, ChatGPT, and Cursor via Rolev.ai MCP.
Tailor without inventing
Every change to your resume is checked against your original. New experience goes in only with your yes—zero fabricated claims.
Draft the full kit
Tailored and Full Match resumes, role-specific cover letters, and answers to employer screening questions are prepared in seconds.
1-Click Extension Autofill
The Chrome extension fills the employer's Greenhouse, Workday, Lever, or Ashby form in 1 click. You review it and press Submit.
Similar roles
All Information Security Analyst jobs- Information Security AnalystAppian Corporation · McLean, VA
- Information Security AnalystTenable, Inc. · Headquarters, MD
- Mission Application Analyst (Journeyman)CACI · Ashburn, VA
- Information Security AdministratorDabella · Austin, TX
- Principal DevOps Engineer (Top Secret Clearance)Ngc · Manhattan Beach, CA · $114k – $171k/yr
- Infrastructure Engineering Senior Analyst, Networking - Cigna HealthcareCigna · Missoula, MT
Common questions
Where is the Security Researcher job at Strix located?
This Security Researcher position at Strix is located in New York, NY (On-site). Always check Strix's application page for specific state eligibility or relocation policies.
What qualifications are required for Security Researcher at Strix?
For the Security Researcher role, Strix highlights 3+ years of relevant experience; experience with web application security, penetration testing, Python. Rolev.ai can score your existing resume against these requirements and show any skill gaps before you apply.
How do I apply for the Security Researcher position at Strix?
This listing links directly to Strix's Ashby application page. You can apply directly on Strix's site, or use Rolev.ai to check your resume fit, generate a zero-hallucination tailored resume and cover letter for this posting, and autofill the Ashby application form in 1 click with the Rolev.ai Chrome extension. You always review the form and press Submit yourself.