Build and improve the AI-powered, agentic system at the heart of MDASH vulnerability discovery, validation, and resolution, combining deep vulnerability research with AI experimentation.
Compensation
The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.
Responsibilities
Conduct hands-on vulnerability research across vulnerability classes, languages, frameworks, and codebase architectures to discover and validate vulnerabilities, assess reachability and exploitability, evaluate fixes for security correctness, and identify opportunities to expand MDASH coverage.
Translate research and evaluation insights into implemented improvements to MDASH agents, tools, model configurations, and analysis methods, and measure their impact.
Identify representative evaluation targets and author trusted ground truth spanning vulnerability evidence, attack paths, severity, validation, and remediation.
Drive MDASH's eval-driven development and hill-climbing loop by running evaluations, uncovering patterns in missed and incorrect results, and creating adversarial and regression cases that turn blind spots into measurable capability gains.
Build research prototypes, fuzzing harnesses, datasets, graders, and automation that accelerate capability improvement.
Requirements
Bachelor's Degree in Computer Science, Computer Security, Computer Engineering, or a related field
Master's Degree in Computer Science, Computer Security, Computer Engineering, or a related field
Doctorate Degree in Computer Science, Computer Security, Computer Engineering, or a related field
Senior Lead/Senior Engineer to provide hands‑on technical leadership for static‑analysis engineering across large Linux, Android, embedded, and kernel C/C++ software platforms.
Responsibilities
Architect and scale static‑analysis solutions across Linux, Android, embedded, and kernel software.
Lead advanced program analysis, checker/model development, TP/FP analysis, and remediation strategies.
Design reusable integration across complex build systems, toolchains, product variants, and CI/CD.
Architect Agentic AI workflows for scan health, triage, root‑cause analysis, remediation, patch generation, and validation.
Define standards for analysis quality, coverage, accuracy, AI evaluation, guardrails, and observability.
Requirements
Bachelor's degree in Engineering, Computer Science, or related field
Master's degree in Engineering, Computer Science, or related field
PhD in Engineering, Computer Science, or related field
Design, build, and evolve the MDASH scanning engine, integrating AI agents and models to analyze codebases, detect vulnerabilities, and generate fixes.
Locations (3)
Redmond, Washington, United States
San Francisco, California, United States
New York, New York, United States
Compensation
Software Engineering IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
Responsibilities
Design, build, and evolve the MDASH scanning engine, including agent orchestration, multi-model routing, code understanding, vulnerability detection, reachability validation, and fix generation and verification.
Extend the engine's coverage across vulnerability classes, programming languages, frameworks, build systems, and codebase sizes, from single services to large monorepos.
Integrate program analysis techniques into agent workflows to make detections more precise and grounded.
Improve the engine's precision, recall, consistency, and fix quality, working from evaluation results, research findings, and production feedback.
Optimize scan performance, scalability, cost, and latency so MDASH works well on enterprise-scale codebases and in CI/CD workflows.
Requirements
Bachelor's Degree in Computer Science or related technical field
Master's Degree in Computer Science or related technical field
Nice to have: Master's Degree in Computer Science or related technical field
Nice to have: 8+ years technical engineering experience
Nice to have: 12+ years technical engineering experience
