Offensive ResearchRemoteFull-time
Security Research Engineer
Design and extend the exploit-generation and validation pipeline behind Cyrion’s autonomous agent swarm.
About the role
You will sit at the center of Cyrion’s offensive capability, the research that decides what our agents are able to find, chain, and prove. This is a hands-on exploit-development role embedded in a product team, not an isolated research function.
What you'll do
- Design and implement new exploit-generation modules across web, API, and cloud attack surfaces.
- Build and maintain the sandboxed validation pipeline that confirms every candidate finding before it ships.
- Reverse-engineer novel vulnerability classes and translate them into repeatable, automatable test logic.
- Partner with the AI/ML team to improve the agents’ hypothesis-generation and attack-chaining reasoning.
- Triage and reproduce edge cases reported by customers and the validation pipeline.
- Publish internal writeups and contribute to the public research blog.
What we're looking for
- 4+ years in offensive security, pentesting, red teaming, or vulnerability research.
- Comfortable reading and writing exploit code (Python, Go, or similar) against real targets.
- Deep knowledge of at least two of: web/API exploitation, cloud privilege escalation, mobile reversing.
- Experience building or operating tooling that automates parts of an engagement, not just running one manually.
- Clear written communication, you will document findings other engineers rely on.
Nice to have
- OSCP, OSWE, or equivalent hands-on certification
- Prior CTF or bug-bounty track record
- Experience with LLM/agentic-AI attack surfaces
Compensation & benefits
Competitive salary plus meaningful early equity, full health coverage, a $2,000/yr learning budget, and your choice of hardware.