Publié il y a 5 mois
AppSec Engineer
@ Theori
Télétravail au Canada
En bref
Theori is hiring an AppSec Engineer, a full-time role based in the US or Canada. The work is triaging and validating vulnerability reports from an AI-powered static analysis platform, writing proof-of-concept exploits, and reporting confirmed vulnerabilities upstream. The posting asks for security engineering or penetration testing experience, CTF participation with writeups, and code auditing skills.
Responsabilités :
- Triage and validate AI static analysis vulnerability reports
- Write proof-of-concept exploits for critical vulnerabilities
- Analyze false positives and give structured feedback to engineering
- Author vulnerability reports for upstream vendors and open source projects
Résumé des exigences :
- Experience in security engineering, vulnerability research, or penetration testing
- Competitive CTF participation with writeups (e.g. DEFCON, PlaidCTF)
- Hands-on real-world vulnerability research and exploitation (preferred)
- Proficiency reading and auditing code across multiple languages
- Prior bug bounty participation (preferred)
- Based in US or Canada
Outils et compétences
Source et dates
Site carrière / système de candidatures · ashby
- Date publiée par l’employeur
- 2026-06-04
- Première détection par notre source
- 2026-10-12
- Mise à jour du dossier source
- 2026-11-06
Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.
Détails du poste
| Domaine | Développement logiciel |
| Heures par semaine | 40 (estimé) |
| Milieu de travail | Bureau, Domicile |
| Position | Surtout assis |
| Exigences physiques | physique faible · ordinateur élevé |
| Langues | English |
Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.
Theori
Profil d’entreprise sauvegardé
Renseignements historiques provenant d’un profil The Jobs API sauvegardé (champs LinkedIn/Crunchbase). Ils ne sont pas vérifiés en temps réel; les chiffres peuvent avoir changé. Les valeurs manquantes restent inconnues.
Empowering Innovation with Security.
Description complète de l’entreprise
Theori is a cybersecurity firm with a mission to make the world more secure by conquering the most difficult cybersecurity challenges. We empower innovation with security. As a leader in offensive cybersecurity, we always strive to stay one step ahead of attackers. We secure the future by solving the impossible with technology-driven approaches, and serve as a hub that leads positive impact and innovation in the cybersecurity field.
- Abonnés LinkedIn
- 3 572
- Personnes associées sur LinkedIn
- 88
- Bureaux déclarés
- 600 Congress Ave., 14th Floor, Austin, TX 78701, US
- 414, Teheran-ro, Seoul, KR
- Autres noms enregistrés
- Theori
- Spécialités
- Offensive Security
- Security Consulting
- Blockchain Security
- Vulnerability Research
- Bug Bounty
- Cybersecurity Education
- Security Audit
- Penetration Testing
- Web3 Security
- and Ethical Hacking
- Le profil indique une agence de recrutement
- Non
Theori is a cybersecurity firm with a mission to make the world more secure by conquering the most difficult cybersecurity challenges. We empower innovation with security. As a leader in offensive cybersecurity, we always strive to stay one step ahead of attackers. We secure the future by solving the impossible with technology-driven approaches, and serve as a hub that leads positive impact and innovation in the…
| Champ | Valeur |
|---|---|
| Secteur | Computer and Network Security |
| Taille | 51-200 employees |
| Siège social | Austin, TX |
| Type d’organisation | Privately Held |
| Fondée en | 2016 |
| Spécialités | Offensive SecuritySecurity ConsultingBlockchain SecurityVulnerability ResearchBug BountyCybersecurity EducationSecurity AuditPenetration TestingWeb3 Securityand Ethical Hacking |
| Offres sur Jobsy | 3 |
| Voir la page |
We're looking for a hands-on Cyber Security Engineer to sit at the intersection of AI-driven tooling and real-world security research. In this role, you'll own the end-to-end triage and validation lifecycle for vulnerability reports generated by our AI-powered static analysis platform, separating true positives from noise, writing proof-of-concept exploits, and reporting vulnerabilities upstream to the appropriate vendor.
This is a deeply technical role built for someone who thinks like an attacker, thrives in ambiguous environments, and has a track record of finding and exploiting vulnerabilities.
What You'll Do
Triage and validate vulnerability reports produced by our AI static analysis tool, verifying severity, exploitability, and business impact
Write proof-of-concept exploits for critical vulnerabilities to confirm true positives
Analyze false positives to identify patterns and provide structured feedback to engineering
Author detailed vulnerability reports that will be submitted to upstream vendors and open source projects
What We're Looking For
Experience in a security engineering, vulnerability research, or penetration testing role
Demonstrated CTF experience through participation in competitive CTFs (e.g. DEFCON, PlaidCTF) with writeups
Hands-on real-world vulnerability research and exploitation experience is preferred
Proficiency reading and auditing code across multiple programming languages
Prior bug bounty participation is preferred
Based in US or Canada
Journal
Visible seulement par vous. Conservé sur cet appareil, et dans votre compte une fois connecté.