AppSec Engineer

The role

You will triage and validate vulnerability reports produced by an AI static analysis tool. You will write proof-of-concept exploits and author detailed reports for upstream vendors and open source projects.

What you will do

• Triage and validate vulnerability reports produced by our AI static analysis tool
• Verify severity, exploitability, and business impact
• Write proof-of-concept exploits for critical vulnerabilities
• Analyze false positives to provide structured feedback to engineering
• Author detailed vulnerability reports for upstream vendors and open source projects

Required qualifications

• Experience in a security engineering, vulnerability research, or penetration testing role
• Demonstrated CTF experience through participation in competitive CTFs with writeups
• Proficiency reading and auditing code across multiple programming languages
• Based in US or Canada

Nice to have

• Hands-on real-world vulnerability research and exploitation experience
• Prior bug bounty participation

About the company

theori