Offensive AI Security Engineer
The Browser Company1 month ago
Remote, AmericasStaff+
Base Salary
$225k - $300k/yr
Responsibilities
- Conduct original offensive security research against Dia, its agent, browser client, integrations, and backend services.
- Investigate prompt injection, indirect exfiltration, tool-call abuse, permission and provenance bypasses, sandbox escapes, cross-profile data access, and quota or abuse-scoring bypasses.
- Threat model new product surfaces and review features before launch to identify exploitability and attacker costs.
- Build model-driven code and infrastructure scanning, fuzzing harnesses, and agentic vulnerability-hunting pipelines.
- Plan and run AI-assisted red-team exercises and build reusable attack corpora and testing harnesses.
- Collaborate with engineers on structural fixes, enforced invariants, fail-closed defaults, tests, linting, and platform changes that prevent recurring vulnerability classes.
- Define security-testing standards and raise the security research capabilities of the broader team.
Requirements
- 8+ years of experience in offensive security, vulnerability research, exploit development, red teaming, or product security testing, with demonstrated success finding real software vulnerabilities.
- Depth in at least one of LLM agent systems, browser or Chromium internals, OS sandboxing and native clients, or backend and cloud infrastructure, with willingness to learn the other areas.
- Practical fluency using LLMs as security research instruments and the ability to distinguish useful output from noise.
- Production-quality programming experience in one or more of Go, TypeScript, Python, or Swift.
- Ability to write actionable security findings and participate in remediation discussions without owning the remediation itself.
- Ability to work independently in a high-trust, high-ambiguity environment.
- Availability for at least four hours of overlap with team members in the Eastern Time Zone.
- Alignment with the company’s values.
Benefits
- Annual base salary range of $225,000-$300,000 USD, plus equity and comprehensive benefits.
- Remote-friendly, remote-first work arrangement with hiring available in the US or Canada.
- Optional office work or visits in Williamsburg, Brooklyn, New York.
- Best-in-class benefits and big-company perks with startup-style impact and ownership.
Tech Stack
Categories
About The Browser Company
The Browser Company of New York is a group of friendly humans working to build a better way to use the internet But how? The web browser is one of the most important tools we use — not just on our computers, but in our lives. The world has changed in the past 15 years, but our web browsers look and behave pretty much the same. We think it’s time to push the web browser forward again, which is why we built Arc and now Dia — browsers that aren't just faster, but also more personal, focused, creative… and maybe even more fun. If this is as exciting for you as it is for us, don't hesitate to say hello! We're always looking for great people to join our mission.