5 days ago
Washington, DC, USA or New York, NY, USASenior
Base Salary
$155k - $215k/yr
Responsibilities
- Design, build, test, safeguard, and improve AI-driven defensive security tooling with appropriate human oversight.
- Assess systems through threat modeling and prioritize detection and remediation work based on risk.
- Participate in incident response for critical vulnerabilities and security events, from exposure assessment through remediation.
- Proactively hunt for unknown weaknesses using automated and manual techniques, then validate and reproduce findings.
- Run vulnerability management at scale by triaging, prioritizing, and remediating vulnerabilities.
- Incorporate threat intelligence and external advisories into remediation priorities.
- Track security performance and communicate risks and tradeoffs to technical and non-technical audiences.
Requirements
- At least 5 years of experience in application security and cloud security fundamentals.
- Strong software engineering skills with production code in at least one modern language, ideally Python.
- Hands-on experience building with LLMs or AI agents.
- Experience conducting threat models and exercising structured judgment during incidents.
- Deep expertise in at least one area: vulnerability research, offensive security or red teaming, exploit development, CVE credits, bug bounty work, vulnerability management at scale, detection and response, security automation, or software supply-chain security.
- Threat intelligence experience, experience in highly regulated industries, and experience securing multi-tenant SaaS are preferred.
Benefits
- Base salary of $155,000 to $215,000 per year, plus equity.
- 401(k) with employer match and health, dental, and vision coverage.
- Unlimited paid time off, free lunch in the office daily, and an employee referral bonus program.
- Financial relocation support for moving to New York City.
- Hybrid work model in Washington, DC (preferred) or New York City.
- Travel to the New York City headquarters at least once per quarter.
About Norm AI
Norm AI builds regulatory and legal AI products that let compliance teams and lawyers design and supervise domain-specific agents for high-stakes, regulated work. It sells software and services to major financial institutions and other large enterprises; its client base represents over $30 trillion in combined assets under management. Founded in 2023 and headquartered in New York, the privately held company also powers Norm Law, an affiliated AI-native law firm for institutional clients.