As a Research Engineer on Offensive Security, you make our agents attack like the best human red teamers, and then better. You'll research how real systems get broken, turn that knowledge into techniques, tools, and evaluations our agents can use, and prove it against real customer environments.

This sits between research and engineering. In one week you might reproduce a new exploit class, teach an agent to chain an SSRF into cloud credential access, build the harness that checks whether it actually got there, and review the findings it files for a customer. You'll work directly with the founders, our engineers, and the security leads who run pentests with our agents, and your work ships to production.

Exploit research: study techniques across web applications, APIs, cloud (AWS, GCP, Azure), CI/CD, and identity, and turn them into capabilities our agents use in the field.

Attack-path discovery: work out how individually minor weaknesses chain into real impact, and encode that reasoning over our live graph of code, cloud, and telemetry.

Red-team tooling: build the scanners, probes, sandboxes, and exploitation helpers our agents call while they work.

Evals and benchmarks: design environments, including intentionally vulnerable targets, that measure whether our agents find, exploit, and validate real vulnerabilities, and keep false positives out.

Field validation: review agent findings from customer engagements, and turn every miss into a test case and an improvement.

Staying ahead: track new CVEs, exploitation research, and attacker tradecraft, and get them into the product within days.

Member of the Technical Staff, Security Engineer

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Tolmo

More roles at Tolmo