Build and improve the AI-powered, agentic system at the heart of MDASH vulnerability discovery, validation, and resolution, combining deep vulnerability research with AI experimentation.
Compensation
The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.
Responsibilities
Conduct hands-on vulnerability research across vulnerability classes, languages, frameworks, and codebase architectures to discover and validate vulnerabilities, assess reachability and exploitability, evaluate fixes for security correctness, and identify opportunities to expand MDASH coverage.
Translate research and evaluation insights into implemented improvements to MDASH agents, tools, model configurations, and analysis methods, and measure their impact.
Identify representative evaluation targets and author trusted ground truth spanning vulnerability evidence, attack paths, severity, validation, and remediation.
Drive MDASH's eval-driven development and hill-climbing loop by running evaluations, uncovering patterns in missed and incorrect results, and creating adversarial and regression cases that turn blind spots into measurable capability gains.
Build research prototypes, fuzzing harnesses, datasets, graders, and automation that accelerate capability improvement.
Requirements
Bachelor's Degree in Computer Science, Computer Security, Computer Engineering, or a related field
Master's Degree in Computer Science, Computer Security, Computer Engineering, or a related field
Doctorate Degree in Computer Science, Computer Security, Computer Engineering, or a related field
Senior Lead/Senior Engineer to provide hands‑on technical leadership for static‑analysis engineering across large Linux, Android, embedded, and kernel C/C++ software platforms.
Responsibilities
Architect and scale static‑analysis solutions across Linux, Android, embedded, and kernel software.
Lead advanced program analysis, checker/model development, TP/FP analysis, and remediation strategies.
Design reusable integration across complex build systems, toolchains, product variants, and CI/CD.
Architect Agentic AI workflows for scan health, triage, root‑cause analysis, remediation, patch generation, and validation.
Define standards for analysis quality, coverage, accuracy, AI evaluation, guardrails, and observability.
Requirements
Bachelor's degree in Engineering, Computer Science, or related field
Master's degree in Engineering, Computer Science, or related field
PhD in Engineering, Computer Science, or related field
Design, build, and evolve the MDASH scanning engine, integrating AI agents and models to analyze codebases, detect vulnerabilities, and generate fixes.
Locations (3)
Redmond, Washington, United States
San Francisco, California, United States
New York, New York, United States
Compensation
Software Engineering IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
Responsibilities
Design, build, and evolve the MDASH scanning engine, including agent orchestration, multi-model routing, code understanding, vulnerability detection, reachability validation, and fix generation and verification.
Lead projects or major workstreams involving multi-disciplinary design, development, data analysis, programming, prototyping, integration, testing, or transition activities.
Leads projects or major workstreams involving multi-disciplinary design, development, data analysis, programming, prototyping, integration, testing, or transition activities.
Applies extensive technical expertise to solve significantly complex problems while effectively evaluating alternative approaches, trade-offs, risks, and mission-driven implications.
Within assigned projects or mission areas, consistently influences the technical approach towards mission research, systems/ subsystems, architecture design and integration.
Structures and manages execution of ambiguous work, concisely translating project objectives into actionable technical plans based on nuanced policies and procedures.
Lead research and development of cyber security tools and techniques, reverse engineering and exploiting software and hardware systems for U.S. government operations.
Compensation
Associate Staff Hiring Range: $114,000 - $148,000
Responsibilities
Owns and executes discrete design and development tasks such as data analyses, programming, designs, tests, models, simulations, or integration tasks within broader project or program efforts.
Applies relevant technical knowledge to solve less-defined and moderately complex problems, independently identifying appropriate methods and adapts existing approaches as needed.
May contribute to system, subsystem, or component-level development activities that may span multiple disciplines, mission needs, products, or technical focus areas.
Develops, reviews, and contributes to technical documentation, program reporting, data analyses, design materials, and presentations based on ambiguous policies and procedures.
Collaborates with project team members to ensure milestones, assumptions, dependencies, and technical risks are understood and addressed.
Requirements
Bachelor’s degree in a STEM discipline or other relevant technical field
Master’s degree in a STEM discipline
Nice to have: Version control systems (Git)
Nice to have: Disassemblers/decompilers (Ghidra, IDA Pro)
Lead research and development of cyber security tools and techniques, reverse engineering and exploitation of software and hardware systems for U.S. government operations.
Lead projects or major workstreams involving multi-disciplinary design, development, data analysis, programming, prototyping, integration, testing, or transition activities.
Apply extensive technical expertise to solve complex problems while evaluating alternative approaches, trade-offs, risks, and mission-driven implications.
Influence technical approach towards mission research, systems/subsystems, architecture design and integration.
Structure and manage execution of ambiguous work, translating project objectives into actionable technical plans.
Mentor others within the Group, reviewing work and providing constructive feedback.
Requirements
Bachelor’s degree in a STEM discipline or other relevant technical field
Conduct research and develop cyber security tools and techniques, reverse engineering and exploiting software and hardware systems for U.S. government operations.
Owns and executes discrete design and development tasks such as data analyses, programming, designs, tests, models, simulations, or integration tasks within broader project or program efforts.
Applies relevant technical knowledge to solve less-defined and moderately complex problems, independently identifying appropriate methods and adapts existing approaches as needed.
May contribute to system, subsystem, or component-level development activities that may span multiple disciplines, mission needs, products, or technical focus areas.
Develops, reviews, and contributes to technical documentation, program reporting, data analyses, design materials, and presentations based on ambiguous policies and procedures.
Collaborates with project team members to ensure milestones, assumptions, dependencies, and technical risks are understood and addressed.
Requirements
Bachelor’s degree in a STEM discipline or other relevant technical field
Master’s degree in a STEM discipline
Nice to have: embedded systems firmware reverse engineering
Nice to have: mobile applications reverse engineering
Extend the engine's coverage across vulnerability classes, programming languages, frameworks, build systems, and codebase sizes, from single services to large monorepos.
Integrate program analysis techniques into agent workflows to make detections more precise and grounded.
Improve the engine's precision, recall, consistency, and fix quality, working from evaluation results, research findings, and production feedback.
Optimize scan performance, scalability, cost, and latency so MDASH works well on enterprise-scale codebases and in CI/CD workflows.
Requirements
Bachelor's Degree in Computer Science or related technical field
Master's Degree in Computer Science or related technical field
Nice to have: Master's Degree in Computer Science or related technical field
Nice to have: 8+ years technical engineering experience
Nice to have: 12+ years technical engineering experience
Mentors others within the Group by consistently reviewing work and providing constructive feedback, offering technical guidance, and helping them to develop and hone their judgment and problem-solving skills.
Requirements
Bachelor’s degree in a STEM discipline
Master’s degree
PhD
Nice to have: reverse engineering of embedded systems firmware
Senior Lead/Senior Engineer - Static Analysis & Agentic AIQualcomm · Hyderabad, India
Integrated Cyber Exploitation ResearcherMIT Lincoln Laboratory · Fort Meade, US+1 more