Posted 5 months ago
AppSec Engineer
@ Theori
Remote in Canada
Overview
Theori is hiring an AppSec Engineer, a full-time role based in the US or Canada. The work is triaging and validating vulnerability reports from an AI-powered static analysis platform, writing proof-of-concept exploits, and reporting confirmed vulnerabilities upstream. The posting asks for security engineering or penetration testing experience, CTF participation with writeups, and code auditing skills.
Responsibilities:
- Triage and validate AI static analysis vulnerability reports
- Write proof-of-concept exploits for critical vulnerabilities
- Analyze false positives and give structured feedback to engineering
- Author vulnerability reports for upstream vendors and open source projects
Requirements summary:
- Experience in security engineering, vulnerability research, or penetration testing
- Competitive CTF participation with writeups (e.g. DEFCON, PlaidCTF)
- Hands-on real-world vulnerability research and exploitation (preferred)
- Proficiency reading and auditing code across multiple languages
- Prior bug bounty participation (preferred)
- Based in US or Canada
Tools & skills
Source and dates
Employer career site / ATS feed · ashby
- Employer posting date
- 2026-06-04
- First seen by our source
- 2026-10-12
- Source record updated
- 2026-11-06
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Department | Software development |
| Hours per week | 40 (estimated) |
| Work setting | Office, Home |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Theori
Saved company profile
Historical company information from a saved The Jobs API profile (LinkedIn/Crunchbase fields). It is not live-verified; figures may have changed. Missing values remain unknown.
Empowering Innovation with Security.
Full company description
Theori is a cybersecurity firm with a mission to make the world more secure by conquering the most difficult cybersecurity challenges. We empower innovation with security. As a leader in offensive cybersecurity, we always strive to stay one step ahead of attackers. We secure the future by solving the impossible with technology-driven approaches, and serve as a hub that leads positive impact and innovation in the cybersecurity field.
- LinkedIn followers
- 3,572
- People associated on LinkedIn
- 88
- Reported office locations
- 600 Congress Ave., 14th Floor, Austin, TX 78701, US
- 414, Teheran-ro, Seoul, KR
- Other recorded names
- Theori
- Specialties
- Offensive Security
- Security Consulting
- Blockchain Security
- Vulnerability Research
- Bug Bounty
- Cybersecurity Education
- Security Audit
- Penetration Testing
- Web3 Security
- and Ethical Hacking
- Profile identifies a recruitment agency
- No
Theori is a cybersecurity firm with a mission to make the world more secure by conquering the most difficult cybersecurity challenges. We empower innovation with security. As a leader in offensive cybersecurity, we always strive to stay one step ahead of attackers. We secure the future by solving the impossible with technology-driven approaches, and serve as a hub that leads positive impact and innovation in the…
| Field | Value |
|---|---|
| Industry | Computer and Network Security |
| Company size | 51-200 employees |
| Headquarters | Austin, TX |
| Organization type | Privately Held |
| Year founded | 2016 |
| Specialties | Offensive SecuritySecurity ConsultingBlockchain SecurityVulnerability ResearchBug BountyCybersecurity EducationSecurity AuditPenetration TestingWeb3 Securityand Ethical Hacking |
| Open jobs on Jobsy | 3 |
| View page |
We're looking for a hands-on Cyber Security Engineer to sit at the intersection of AI-driven tooling and real-world security research. In this role, you'll own the end-to-end triage and validation lifecycle for vulnerability reports generated by our AI-powered static analysis platform, separating true positives from noise, writing proof-of-concept exploits, and reporting vulnerabilities upstream to the appropriate vendor.
This is a deeply technical role built for someone who thinks like an attacker, thrives in ambiguous environments, and has a track record of finding and exploiting vulnerabilities.
What You'll Do
Triage and validate vulnerability reports produced by our AI static analysis tool, verifying severity, exploitability, and business impact
Write proof-of-concept exploits for critical vulnerabilities to confirm true positives
Analyze false positives to identify patterns and provide structured feedback to engineering
Author detailed vulnerability reports that will be submitted to upstream vendors and open source projects
What We're Looking For
Experience in a security engineering, vulnerability research, or penetration testing role
Demonstrated CTF experience through participation in competitive CTFs (e.g. DEFCON, PlaidCTF) with writeups
Hands-on real-world vulnerability research and exploitation experience is preferred
Proficiency reading and auditing code across multiple programming languages
Prior bug bounty participation is preferred
Based in US or Canada
Journal
Only you can see this. Kept on this device, and in your account when you sign in.