Norm AI AI Security Engineer at Norm AI to build automated, AI-driven systems for security threat detection and remediation. The role involves working across the full lifecycle from discovery and threat modeling to remediation and response.
Responsibilities
Build defensive automation: Design, build, and improve AI-driven security tooling, with the testing, safeguards, and human oversight you’d expect of production systems.
Threat-model: Assess new and existing systems for risk, and use those models to decide where detection and remediation effort goes.
Respond to incidents: Join the response rotation for critical vulnerabilities and security events, from assessing exposure through remediation.
Measure and communicate: Track how well our security work is performing, and explain risks and tradeoffs clearly to technical and non-technical audiences.
Find unknown weaknesses: Proactively hunt for previously unknown weaknesses using both automated and manual techniques, in a safe and controlled way.
Validate findings: Confirm and reproduce findings, and feed what you learn back into the automation to make it better.
Operations Focus
Run vulnerability management at scale: Triage, prioritize, and remediate vulnerabilities, automating as much of the process as you can.
Turn threat information into priorities: Bring threat intelligence and external advisories into decisions about what gets fixed first.
Qualification
Core QualificationsStrong software engineering skillsExperience running threat modelsCalmDeep Expertise in at Least One AreaResearchOperationsThreat intelligence experienceExperience securing multi-tenant SaaS
Required
Core Qualifications
Strong software engineering skills, with production code in at least one modern language
Hands-on experience building with LLMs or AI agents
Solid application security and cloud security fundamentals
Experience running threat models
Calm, structured judgment during incidents
Deep Expertise in at Least One Area
Research: Vulnerability research, offensive security or red teaming, exploit development, CVE credits, or bug bounty work
Operations: Vulnerability management at scale, detection and response, security automation, or software supply-chain security
