Senior Enterprise Security Engineer, Vulnerability Management and Zero-Day Response
AI research and deployment company
| Employer | AI research and deployment company (not named) |
|---|---|
| Location | San Francisco, CA (Bay Area) · On-site |
| Type & level | Full-time · Senior |
| Pay | USD 347k–445k + equity Source: pay range stated in the source posting |
| Visa path | O-1A fit |
| Role family | Vulnerability Researcher / Offensive Security |
About the role
The enterprise security team protects the systems, identities, devices, and services that employees use every day. This role focuses on finding and prioritizing vulnerabilities, including novel ones and zero-days, across networks, endpoints, and SaaS, then driving fixes to verified closure. It also involves building automation and controls for AI agents. The posting says remote candidates in the U.S. are also considered.
What you'll do
- Investigate and prioritize vulnerabilities and misconfigurations, including zero-days with incomplete information.
- Turn technical findings into clear attack paths, business impact, and remediation steps.
- Develop and validate emergency mitigations when patches are unavailable.
- Coordinate with system owners, vendors, and incident responders to reach verified fixes.
- Build security tools and integrations using code, APIs, automation, and AI agents.
- Design controls for agent access, execution, and accountability, and support incident investigations.
Requirements
- Experience independently investigating novel or emerging vulnerabilities and driving remediation to verified closure.
- Technical depth in a relevant security domain with working knowledge of networks, endpoints, and SaaS.
- Ability to read and improve code and safely integrate APIs and security systems.
- Experience solving real problems with AI agents and evaluating their output.
- Clear communication of technical risk to varied audiences.
Nice to have
Pay & benefits
USD 347k–445k + equity. The posting lists equity as part of compensation. It does not describe other benefits.
Pay source: pay range stated in the source posting. Market data, not an offer from O1DMatch.
Visa path
Vulnerability researchers and security engineers commonly support an O-1A case with evidence such as zero-day discoveries, coordinated disclosures, published work, talks, and high compensation. The posting states no citizenship restriction. An employer like this or a U.S. agent can file, and approval depends on the individual's evidence.
How to get matched
- Take the free eligibility checkAn AI review of your background against the eight O-1 criteria, at check.o1dmatch.com.
- Create your profile with code WORKWITHUSIt unlocks the Starter plan at no cost. Tell us your field and the work you do today.
- Upload your evidenceEach document is sorted under the criterion it supports, and your criteria map shows what is still missing.
- Get matchedWe match strong profiles with U.S. employers hiring for roles like this one. Gigs you confirm with verified companies count toward your itinerary, and at a score of 75 we connect you with an immigration attorney.
This listing describes a real U.S. posting so you can see what employers ask for. O1DMatch does not represent that employer and does not hold this opening; applying matches you with employers hiring for this kind of role. No visa outcome is promised.