Security Researcher

At Octane, we're building the agentic security layer for mission-critical source code and systems, finding real, exploitable vulnerabilities.

What we're looking for

We're looking for a Security Researcher who can discover critical vulnerabilities across high-value open-source targets using Octane and help push the boundaries of agentic security research.

This is a hands-on research role. You'll select promising targets, investigate attack surfaces, validate findings, develop exploits, and coordinate disclosure with maintainers. You'll work closely with our security researchers and ML team to improve how Octane discovers and validates vulnerabilities.

We want someone with strong offensive security instincts who enjoys going deep. You should be curious about why a system breaks, persistent when an investigation gets difficult, and rigorous about proving what you've found.

You'll have the opportunity to earn CVEs, publish research, and build your reputation as a researcher while working with cutting-edge agentic security workflows. We care about the quality and impact of your discoveries, the strength of your evidence, and what your work teaches us about improving Octane.

You do not need a particular degree or a long list of previous employers. We care more about what you've discovered, how you think, and the work you can show.

Responsibilities

• Hunt for critical vulnerabilities in high-value open-source software using Octane, your own research judgment, and complementary analysis tools.
• Identify promising targets and attack surfaces based on real-world exposure, potential impact, and opportunities for novel research.
• Investigate findings deeply. Trace root causes, identify exploitation prerequisites, and distinguish real vulnerabilities from false positives.
• Develop reproducible proofs of concept and exploits that demonstrate security impact.
• Use and refine agentic security workflows. Guide investigations, supply missing context, and identify where agents need better tools or strategies.
• Coordinate responsible disclosure with maintainers, prepare clear technical reports, and support reproduction and remediation.
• Validate fixes and check for incomplete patches, related variants, or additional vulnerabilities.
• Publish technical write-ups and contribute to research presentations when disclosure timelines permit.
• Work with our ML and engineering teams to turn discoveries, false positives, and missed findings into improvements to Octane.
• Build reusable tooling and share techniques that help the research team find more consequential vulnerabilities.

Qualifications