Latest AI JobsBrowse Jobs
The Browser Company logo

Staff Security Researcher, Offensive AI

The Browser CompanyRemote - North AmericaEngineering
Apply on company site
Salary
$225K-$300K
Job type
Full-time
Work mode
Remote
Posted
25 Sept 2026
Status
Open · checked 7d ago

About this role

The Staff Security Researcher, Offensive AI position at The Browser Company is a remote opportunity based in North America that involves conducting original security research on an agent-enhanced browser. This role suits an experienced offensive security professional eager to pioneer threat models for agentic web software and build automated vulnerability discovery systems.

Role Overview

As a Staff Security Researcher, you will focus on Dia, a browser equipped with agentic capabilities that interact with untrusted web content and execute real actions. Because this technology lacks prior art, you will explore unique threat models beyond standard checklists. Reporting to the Head of Security, you will collaborate with client, infrastructure, and product engineering teams to perform proactive threat modeling, execute offensive research, and build automated hunting systems.

Key Responsibilities

Conduct original offensive research against Dia, its agent, and backend services, targeting prompt injection, indirect exfiltration, tool-call abuse, and sandbox escapes.
Partner with product teams to threat model new surface areas and review features prior to public release.
Design and implement automated vulnerability discovery pipelines, including model-driven code scanners, fuzzing harnesses, and agentic hunting systems.
Collaborate with remediation engineers to eliminate entire vulnerability classes through structural changes, enforced invariants, and fail-closed defaults.
Shape continuous AI-assisted vulnerability discovery, agent red teaming exercises, and pre-launch review practices.

Requirements

Bring eight or more years of experience in offensive security, encompassing vulnerability research, exploit development, red teaming, or product security testing.
Possess deep technical knowledge in at least one complex area such as LLM agent systems, browser or Chromium internals, OS sandboxing, or cloud infrastructure.
Demonstrate practical fluency in utilizing large language models as testing instruments while filtering out noise.
Write production-quality code using programming languages like Python, TypeScript, Go, or Swift to build automated bug-finding tools.
Communicate technical findings clearly to engineers and engage in fix conversations without directly owning remediation.
Thrive independently within a high-trust, high-ambiguity remote work environment.
Availability to maintain at least four hours of daily overlap with team members in the Eastern Time Zone of North America.

Skills and Tools

Python
TypeScript
Go or Swift
Large Language Models (LLMs)
Fuzzing harnesses and code scanning systems
Threat modeling and red teaming methodologies

Salary and Benefits

The annual base salary range for this full-time position is $225,000 to $300,000 USD, supplemented by equity and comprehensive benefits.
Total compensation and final offers are determined based on individual experience, expertise, and interview performance.
Comprehensive perks and benefits designed to support team members, their families, and life outside of work.

About the Company

The Browser Company is a remote-friendly organization building innovative software to improve how people experience the internet. Consisting of an ambitious team of close to one hundred people, the company values diverse perspectives, creative thinking, and a collaborative startup culture. Employees can work remotely across the US and Canada or utilize the office space in Williamsburg, Brooklyn.

How to Apply

Interested candidates should visit the official company careers page of The Browser Company to submit an application for this remote role.

Skills and tech stack

PythonLLMLLMsTypeScript

Questions candidates ask

What is the geographic requirement for this remote role?

Candidates must be based in North American time zones, specifically the US or Canada, and require at least four hours of daily time overlap with team members in the Eastern Time Zone.

What is the salary range for the Staff Security Researcher position?

The annual base salary ranges from $225,000 to $300,000 USD, with exact offers depending on experience, expertise, and interview performance, alongside equity and comprehensive benefits.

How many years of experience are required?

Applicants must have 8+ years of experience in offensive security, including vulnerability research, exploit development, red teaming, or product security testing.

What programming languages are needed?

You must be able to write production-quality code in one or more languages including Python, TypeScript, Go, or Swift.

Can I work from an office if I prefer not to work remotely all the time?

Yes, while the company is remote-friendly across the US and Canada, employees are welcome to work from the office in Williamsburg, Brooklyn, New York.

Ready to apply?

The application is on the official The Browser Company careers page.

Apply on company site