Security Researcher

Description

About the Position

OX Security is securing the AI-driven SDLC from prompt to production. We’re building the next generation of security technology for a world where AI is changing how software is built, deployed, and attacked.

We’re looking for a highly skilled Security Researcher to join our Security Research group and help us discover, investigate, and build new ways to identify and understand security risks across modern applications and infrastructure.

This is a hands-on research and engineering role. You’ll investigate how real-world systems can be attacked, explore new attack techniques, develop proof-of-concepts, and turn your research into production-grade capabilities used to detect and prioritize real security risks at scale.

You’ll work closely with security researchers, software engineers, AI and data scientists, and product teams to solve complex problems at the intersection of security research, automation, and AI.

If you enjoy taking an idea from “What if?” to a working POC to a production capability, this role is for you.

Requirements:

What You’ll Be Doing

• Research and investigate new attack techniques, vulnerabilities, and security weaknesses across modern applications and infrastructure
• Analyze complex attack scenarios and identify how vulnerabilities can be chained into meaningful attack paths
• Develop proof-of-concepts, exploits, and research tools to validate security hypotheses
• Build detection engines and automated security capabilities based on your research
• Explore ways to use application, code, cloud, and runtime context to identify real-world security risks
• Prototype and turn research ideas into scalable, production-ready security capabilities
• Analyze large-scale security data to identify patterns, attack opportunities, and emerging threats
• Collaborate closely with Engineering, Product, AI, and Data teams to bring research into the product
• Contribute to the research direction and technical strategy of the Security Research group
• Stay ahead of emerging vulnerabilities, attack techniques, and changes in the modern software development landscape