Security Researcher at Pi Security | CA, US | Rezi

Security Researcher at Pi Security

Security Researcher

Pi Security · CA, US

4 weeks ago

Security Researcher

Pi Security · CA, US

a month ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now
Resume preview

Tailor your resume to this Security Researcher role.

Rezi rewrites your resume against Pi Security's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Security Researcher posting at Pi Security — free, in seconds.

About the Role

Lead security research at Pi, focusing on inventing new approaches for vulnerability detection, triage, and remediation using LLMs and program analysis. You will own the process from idea to shipped capability, including hypothesis formation, proof of concept development, validation, and partnering with engineering. You will also set the quality bar through benchmarks and evaluations, and shape the research agenda and team growth.

Responsibilities

  • Identify where new approaches can meaningfully beat the state of the art in vulnerability detection, triage, and remediation, then decide what to pursue.
  • Build proofs of concept for new detection and remediation techniques, validate them against real world code and data, and carry the winners through to production.
  • Design the datasets, benchmarks, and evaluation pipelines that measure precision, coverage, and false positive rates.
  • Conduct deep research into modern attack vectors across cloud (AWS/GCP), containers, microservices, APIs, AI generated code, and LLM applications.
  • Manage the internal corpus of vulnerabilities, exploit patterns, and remediation strategies the platform learns from.
  • Contribute to the company's research publications, speaking engagements, and credibility in the security community.

Requirements

  • 8+ years in security research, vulnerability analysis, or applied security engineering.
  • Experience in an early stage or 0 to 1 environment, comfortable with ambiguity and changing direction.
  • Proven track record of turning research into shipped features, tools, or detections in production.
  • Deep expertise in modern application stacks (microservices, containers, cloud platforms).
  • Strong programming ability in at least one modern language (Python, Go, TypeScript).
  • Experience designing experiments, building datasets or benchmarks, and measuring quality quantitatively.
  • Hands-on experience applying LLMs to real problems (evaluation, prompting, fine tuning, agentic systems) or a demonstrated ability to get there fast.
  • History of discovering serious vulnerabilities and responsible disclosure.
  • Ability to clearly explain complex attacks and their impact to various audiences.
  • Permanent authorization to work in the US.
  • Willingness to work onsite in San Francisco five days a week.

Skills

  • Security research
  • Vulnerability analysis
  • Applied security engineering
  • LLMs
  • Program analysis
  • Cloud security (AWS/GCP)
  • Container security
  • Microservices security
  • API security
  • AI generated code security
  • LLM application security
  • Python
  • Go
  • TypeScript
  • Experiment design
  • Dataset building
  • Benchmark creation
  • Quantitative quality measurement
  • Prompting
  • Fine tuning
  • Agentic systems
  • Vulnerability discovery
  • Responsible disclosure
  • Communication

Location

  • San Francisco, CA

Work Type

  • Full-time
  • Onsite

Experience Level

  • 8+ years

Salary/Compensations

  • $140,000 - $242,000 per year

Benefits

  • Meaningful equity in Pi.Security
  • Medical, dental, and vision coverage for you and your family
  • Flexible Spending Accounts (FSAs) for health and dependent care
  • Commuter benefits
  • Unlimited PTO
  • 401(k)
  • Health and wellness stipend
  • Lunch allowance on in-office days

About the Company

  • Pi is building an agentic product security platform for teams that need to secure software at the speed they build it.
  • Pi turns context into institutional security memory, helping teams triage faster, remediate in context, prevent repeat vulnerability classes, and embed security guardrails where engineering work already happens.
  • Pi was recognized on Fast Company's 2026 Next Big Things in Tech list and covered by Forbes!
  • Pi is backed by a $35 million Series A led by Third Point Ventures and Brightmind Partners, with support from CrowdStrike CEO George Kurtz and Armis founders Yevgeny Dibrov and Nadir Izrael.
  • Leading AI companies and enterprise innovators already rely on Pi, including xAI, Notion, Navan, Lemonade, and Teramind, and it's available through AWS Marketplace and a strategic partnership with Bugcrowd.
  • Founders Guy Arazi (former security researcher at Microsoft) and Yoni Ramon (former offensive security lead at Tesla) work closely with the team.
  • The company hires for Speed, Depth, Curiosity, and Ambition.

Equal Opportunity

  • Pi.Security is an equal opportunity employer.
  • We welcome applicants of all backgrounds and are committed to building a diverse and inclusive team.
  • Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.