8 hours ago
Washington, DC, USA or New York, NY, USASenior
Base Salary
$155k - $215k/yr
Responsibilities
- Build and improve AI-driven security tooling with production-grade testing, safeguards, and human oversight.
- Threat-model new and existing systems and use the results to prioritize detection and remediation work.
- Participate in incident response for critical vulnerabilities and security events through exposure assessment and remediation.
- Track security effectiveness and communicate risks and tradeoffs to technical and non-technical audiences.
- Research, reproduce, and validate previously unknown security weaknesses using automated and manual techniques.
- Run vulnerability management at scale and incorporate threat intelligence and external advisories into remediation priorities.
Requirements
- Strong software engineering skills and production code experience in at least one modern programming language.
- Hands-on experience building with LLMs or AI agents.
- Solid application security and cloud security fundamentals.
- Experience conducting threat models and exercising structured judgment during incidents.
- Deep expertise in at least one area: vulnerability research, offensive security, red teaming, exploit development, CVE credits, bug bounty work, vulnerability management, detection and response, security automation, or software supply-chain security.
- Preferred qualifications include threat intelligence experience, experience in highly regulated industries, and experience securing multi-tenant SaaS.
Benefits
- Base salary of $155,000 to $215,000 per year, plus equity.
- 401(k) with employer match and health, dental, and vision coverage.
- Unlimited paid time off, free lunch in the office daily, and an employee referral bonus program.
- Financial relocation support for moving to New York City.
- Hybrid work model in Washington, DC, preferred, or New York City.
- Travel to the New York City headquarters at least once per quarter.
Categories
About Norm AI
Norm AI builds regulatory and legal AI products that let compliance teams and lawyers design and supervise domain-specific agents for high-stakes, regulated work. It sells software and services to major financial institutions and other large enterprises; its client base represents over $30 trillion in combined assets under management. Founded in 2023 and headquartered in New York, the privately held company also powers Norm Law, an affiliated AI-native law firm for institutional clients.