The Browser Company

Security Engineer

• Run original offensive research against Dia, its agent, and backend services
• Investigate prompt injection and indirect exfiltration, tool-call abuse, permission and provenance bypass, sandbox escape, cross-profile data access, and quota and abuse-scoring bypass
• Threat model new surface areas with product teams and review features before launch
• Design and build automated vulnerability discovery, including model-driven code and infrastructure scanning, fuzzing harnesses, and agentic hunting pipelines
• Collaborate with engineers to eliminate vulnerability classes and make issues structurally difficult to reintroduce
• Define the standard for security testing before features ship
• Survey commercial scanning services, frontier models, and open-source security models and deploy them against the codebase, infrastructure, and agent runtime
• Plan and run regular AI-assisted red-team exercises and build attack corpora and harnesses
• Shape pre-launch reviews for tools, integrations, agent capabilities, enterprise controls, and platform expansion
• Report to the Head of Security and work across client, infrastructure, and product engineering

Staff Security Researcher – Offensive AI