Help Secure the Software the World Runs On

At Octane, we're building the agentic security layer for mission-critical source code and systems, finding and patching real, exploitable vulnerabilities.

What we're looking for

We're looking for a Senior Forward Deployed Security Researcher who can work directly with some of Octane's most important customers to solve difficult, real-world security problems and turn those learnings into better security agents.

This is a hands-on, high-agency role. You'll work closely with our founder, security research leadership, and ML team to adapt Octane to complex customer environments, develop new vulnerability detection strategies, and build state-of-the-art cyber intelligence.

You should be equally comfortable digging into an unfamiliar codebase, developing a proof of concept, refining an agent's investigation strategy, and explaining a finding to a customer's engineering or security team. We want someone who can earn technical trust, challenge assumptions, and own a problem through resolution.

We're looking for a strong background in vulnerability research, practical exploit development experience, and exceptional communication skills. You should understand how business logic, architecture, deployment conditions, and trust boundaries affect whether a vulnerability is actually exploitable.

You do not need to have held a forward deployed title before. We care more about the security problems you've solved, what you personally owned, and the results you delivered.

Responsibilities

• Work directly with priority customers to understand their architecture, threat model, security requirements, and most important attack surfaces.
• Adapt and refine Octane's security agents for complex environments. Identify missing context, improve investigation strategies, and make findings more accurate and useful.
• Develop new vulnerability detection strategies based on customer needs, emerging attack patterns, and gaps in existing security tooling.
• Investigate and validate findings through code analysis, testing, and proof-of-concept development. Establish exploitability, prerequisites, and impact.
• Explain findings clearly to engineering and security teams. Help customers reproduce issues, evaluate severity, and identify practical remediation.
• Own the technical work across customer engagements, from scoping and onboarding through analysis, findings review, and follow-up.
• Work closely with our ML and engineering teams to turn customer-specific learnings into reusable improvements to our agents, tooling, and evaluation methods.
• Diagnose false positives. Identify their underlying causes and improve the context, tools, or reasoning needed to address them.
• Build scripts, integrations, and research tools that make investigations faster and customer workflows more effective.
• Maintain a high bar for evidence and technical credibility. Success means validated severe findings, customer trust, and measurable improvements in Octane's capabilities.

Requirements

• Strong experience in application or systems security research, with a track record of finding and validating meaningful vulnerabilities in complex software.
• Practical exploit development experience. You can move from a suspected issue to a reproducible proof of concept and explain the conditions required for exploitation.
• Ability to independently navigate unfamiliar codebases, reason about architecture and trust boundaries, and prioritize the most consequential attack surfaces.
• Strong programming skills and the ability to build tooling, modify code, and automate parts of a research workflow.
• Excellent written and verbal communication. You can explain complex vulnerabilities clearly, defend your conclusions with evidence, and work productively with customer engineering and security teams.
• Experience owning ambiguous technical problems from investigation through resolution. You are comfortable working directly with customers and taking responsibility for outcomes.

Nice to have

• Experience in a forward deployed, customer-facing security research, consulting, or technical delivery role.
• Experience building or refining AI agents, security research harnesses, fuzzing workflows, or automated vulnerability detection systems.
• Published CVEs, technical research, exploit write-ups, open-source security tooling, or talks at conferences such as DEF CON or Black Hat.
• Deep expertise in a relevant domain, such as native code, browser security, cloud infrastructure, authentication, distributed systems, or smart contracts.
• Experience working with enterprise customers and understanding how deployment constraints and business context affect security decisions.
• Based in or willing to move to NYC, and willing to travel for customer engagements.

Benefits

• Competitive salary
• Healthcare coverage
• Dental coverage
• Visa sponsorship available

How to apply

Email jobs@octane.security with your resume or LinkedIn profile and 2–3 examples of security work you personally created or led. For each example, briefly explain the problem, your contribution, and the outcome. Vulnerability discoveries, exploit development, customer engagements, research tools, and technical write-ups are all welcome. Share public or appropriately redacted examples.

Show us what wouldn't have happened without you.

At Octane, we're building the agentic security layer for mission-critical source code and systems, finding real, exploitable vulnerabilities.

What we're looking for

We're looking for a Security Researcher who can discover critical vulnerabilities across high-value open-source targets using Octane and help push the boundaries of agentic security research.

This is a hands-on research role. You'll select promising targets, investigate attack surfaces, validate findings, develop exploits, and coordinate disclosure with maintainers. You'll work closely with our security researchers and ML team to improve how Octane discovers and validates vulnerabilities.

We want someone with strong offensive security instincts who enjoys going deep. You should be curious about why a system breaks, persistent when an investigation gets difficult, and rigorous about proving what you've found.

You'll have the opportunity to earn CVEs, publish research, and build your reputation as a researcher while working with cutting-edge agentic security workflows. We care about the quality and impact of your discoveries, the strength of your evidence, and what your work teaches us about improving Octane.

You do not need a particular degree or a long list of previous employers. We care more about what you've discovered, how you think, and the work you can show.

Responsibilities

• Hunt for critical vulnerabilities in high-value open-source software using Octane, your own research judgment, and complementary analysis tools.
• Identify promising targets and attack surfaces based on real-world exposure, potential impact, and opportunities for novel research.
• Investigate findings deeply. Trace root causes, identify exploitation prerequisites, and distinguish real vulnerabilities from false positives.
• Develop reproducible proofs of concept and exploits that demonstrate security impact.
• Use and refine agentic security workflows. Guide investigations, supply missing context, and identify where agents need better tools or strategies.
• Coordinate responsible disclosure with maintainers, prepare clear technical reports, and support reproduction and remediation.
• Validate fixes and check for incomplete patches, related variants, or additional vulnerabilities.
• Publish technical write-ups and contribute to research presentations when disclosure timelines permit.
• Work with our ML and engineering teams to turn discoveries, false positives, and missed findings into improvements to Octane.
• Build reusable tooling and share techniques that help the research team find more consequential vulnerabilities.

Requirements

• Demonstrated ability to discover and validate software vulnerabilities through professional work, independent research, open-source contributions, or other substantive projects.
• Practical exploit development experience, including building proofs of concept and reasoning about exploitation conditions and impact.
• Strong code analysis and debugging skills. You can navigate unfamiliar software and investigate a suspected vulnerability beyond a tool's initial output.
• Strong programming skills and the ability to build scripts and tools that support your research.
• Clear technical writing and strong communication skills for reporting findings and coordinating disclosure with maintainers.
• Rigorous research judgment. You validate claims, document evidence, and remain open to findings being disproven.
• Ability to own a research investigation independently and persist through difficult technical problems.

Nice to have

• Published CVEs, bug bounty findings, exploit write-ups, security advisories, or a portfolio of original vulnerability research.
• Deep expertise in memory corruption, native code exploitation, browser security, operating systems, virtualization, authentication, or other high-impact research areas.
• Experience with fuzzing, reverse engineering, static or dynamic analysis, or variant analysis.
• Experience using AI agents for security research or building automated research workflows. This is a very big plus.
• Open-source security tools or contributions to projects relevant to vulnerability discovery.
• Conference talks, technical publications, or experience presenting original research.
• Background in defense.
• Based in or willing to move to NYC.

Benefits

• Competitive salary
• Healthcare coverage
• Dental coverage
• Visa sponsorship available

How to apply

Email jobs@octane.security with your resume or LinkedIn profile and 2–3 examples of security research you personally conducted. For each example, briefly explain the target, how you discovered the issue, your contribution, and the outcome. CVEs, exploit write-ups, bug bounty reports, research tools, and coordinated disclosures are all welcome. Share public or appropriately redacted examples.

Show us what wouldn't have been discovered without you.

What we're looking for

We're seeking a skilled full-stack engineer to join our team. The ideal candidate has strong experience in both frontend and backend development, with expertise in TypeScript and React. Knowledge of Solidity, Rust, Python, and data scraping is a plus but not required.

You'll work closely with the engineering team and our founder to build new products and features. We're looking for someone who is passionate about creating high-quality software and thrives in a fast-paced startup environment.

Responsibilities

• Design and implement scalable backend services using TypeScript, Node, and JavaScript.
• Develop responsive and performant frontend applications using React.
• Write clean, maintainable, and well-tested code.
• Collaborate with team members to architect and implement new features.
• Participate in code reviews and technical discussions.
• Implement advanced caching solutions using Redis to ensure high performance and scalability.
• Use Prisma for efficient and maintainable database operations.
• Architect and develop APIs using NestJS, applying sound design patterns, SOLID principles, and best development practices.

Requirements

• 4+ years of experience building scalable web applications.
• Hands-on experience with NestJS and Node.js/TypeScript.
• Strong proficiency in TypeScript and modern JavaScript.
• Proficiency in PostgreSQL, including writing and optimizing complex raw SQL queries.
• Extensive experience with React and frontend development.
• Experience with AWS infrastructure, ideally using infrastructure-as-code frameworks such as Pulumi or Terraform.
• Solid understanding of web security, API design, and database concepts.
• Experience with Git and modern CI/CD practices.
• Experience with Docker BuildKit (ARM and x86) and infrastructure-as-code principles.
• Production experience with Node.js, TypeScript, NestJS, React, Tailwind, and Chakra is strongly preferred.

Nice to have

• Experience with Solidity or Rust.
• Knowledge of blockchain technology.
• Experience with GraphQL.
• Experience in Python environments, managing dependencies with Poetry, and using Jupyter notebooks for analysis.
• Proficiency with data scraping tools such as Puppeteer, Selenium, requests, and BeautifulSoup.

Benefits

• Competitive salary
• Healthcare coverage
• Dental coverage
• Visa sponsorship available

How to apply

Email jobs@octane.security with your resume and anything else that makes you stand out.

At Octane, we're building the agentic security layer for mission-critical source code and systems, finding real, exploitable vulnerabilities.

What we're looking for

We're looking for a VP of Marketing / CMO who can turn our technical advantage into a distinctive brand, customer demand, and revenue.

This is a hands-on, company-building role. You'll work directly with our founder and our research, product, and sales teams to shape how Octane goes to market. You should be equally comfortable defining our positioning, writing compelling copy, launching a campaign, and figuring out why it did or didn't convert. This is a high-agency role.

We want you to be opinionated and excited about the agentic security space. Ideally you have spoken at DEF CON or Black Hat, or are otherwise known for speaking on technical cybersecurity topics.

We're looking for someone with strong founder-like instincts, exceptional creative judgment, and a track record of building from 0 → 1 and 1 → 10. Someone who can understand a complex technical product, identify what matters to the customer, and create work that earns attention without sacrificing credibility.

You do not need to have held a CMO title before. We care more about what you've built, what you personally owned, and the results you delivered.

Responsibilities

• Drive qualified enterprise and mid-market pipeline through marketing, and partner with Sales to improve conversion across outbound, inbound, referrals, and other acquisition channels.
• Own Octane's positioning, messaging (including content, website, and media), and brand. Make it clear who we serve, what makes us different, and why customers should buy.
• Turn deep technical work into commercial impact. Work closely with our researchers and engineers to transform novel discoveries, product capabilities, and customer outcomes into compelling marketing campaigns. Own those campaigns and their outcomes end to end.
• Build a repeatable demand-generation engine. Identify and test the channels, offers, and distribution strategies that bring the right customers to Octane. Scale what works and kill what fails. Core KPIs include marketing-sourced qualified pipeline, closed-won revenue contribution, and acquisition efficiency.
• Write copy yourself, launch landing pages, and develop campaign concepts. You'll have resources to work with designers as needed, and we can scale content budget over time, but we scale once the outcome owner understands what works and what doesn't.
• Join customer success calls, interview users, and work with product leadership to understand buying triggers, objections, competitive alternatives, and opportunities to improve adoption and market education.
• Partner with Sales on customer stories, competitive positioning, sales materials, and the journey from first interaction to evaluation and purchase.
• Own the metrics that connect marketing to revenue: qualified pipeline, closed-won contribution, conversion, and acquisition efficiency.
• Use AI and automation thoughtfully. Build workflows that increase speed and capacity. We do not want AI slop, and we can easily see through it.
• Build and lead a lean marketing team. Hire and manage employees, contractors, and agencies where they create meaningful leverage.

Requirements

• Experience building marketing or growth at early-stage cybersecurity startups, ideally in code or systems security. Past roles should be at respected security brands.
• Demonstrated ability to create customer demand and connect marketing work to pipeline and revenue. A clear history of taking a startup from six or seven figures in run-rate to eight or nine figures, with a material personal contribution to that growth.
• Excellent writing skills, with a portfolio that demonstrates a distinctive voice, clear thinking, and strong creative judgment.
• Hands-on experience launching campaigns, improving websites and conversion, testing distribution channels, and using data to make decisions.
• Experience launching media campaigns and running successful press releases.

Nice to have

• Strong full-stack marketing experience across brand, demand generation, and product marketing, including customer segmentation, positioning, messaging, and translating technical capabilities into reasons to buy.
• Experience marketing application security, developer security, AI infrastructure, or products sold to CISOs, engineers, and security leaders.
• Ability to build lightweight tools, interactive demos, websites, or automations yourself. A huge plus if you're good at this.
• Experience influencing product packaging, pricing, or evaluation processes for enterprise, mid-market, and SMB customers to improve adoption and conversion.
• Based in or willing to move to NYC (not required), and willing to travel.
• Experience running and planning events that generate strong top-of-funnel demand with clear ROI tracking.

Benefits

• Competitive salary
• Healthcare coverage
• Dental coverage
• Visa sponsorship available

How to apply

Email jobs@octane.security with your resume or LinkedIn profile and 2–3 examples of work you personally created or led. For each example, briefly explain the problem, your contribution, and the outcome. Campaigns, websites, product launches, growth experiments, writing, and tools are all welcome.

Show us what wouldn't have happened without you.

What we're looking for

We're seeking a growth lead with a strong background in lead generation, sales, building repeatable customer acquisition pipelines, and recruiting channel partners, and a record of overachieving on previous sales quotas. You'll join Octane with an established network across Series A–C companies. Experience selling cybersecurity products is a huge plus.

This role focuses on generating pipeline for our application security business, working alongside sales leaders previously at Trail of Bits and Elastic. You'll be involved in the sales process for our proactive AI security product, spending most of your time prospecting, generating leads, and finding strategic ways to expand the business. You'll also work directly with the CEO to close deals.

Responsibilities

• Identify new prospects through market research.
• Qualify leads.
• Perform initial outreach.
• Guide leads through the initial sales process.
• Attend and plan for conferences.
• Develop ongoing product knowledge.
• Educate teams on continuous software security.
• Build processes to automate customer acquisition and lead generation.
• Work with marketing.
• Work with our security research team.

Requirements

• An established network of leads at companies interested in SAST, DAST, and CNAPP.
• A record of significantly exceeding lead generation and/or closing quotas.
• Passion for technology: software, cybersecurity, and machine learning.
• 2+ years of experience as an AE, BDR, or SDR.
• Ideally, an understanding of the security landscape.

Nice to have

• Deep experience selling cybersecurity products.
• Experience selling to CTOs, heads of engineering, and CISOs.

Compensation and benefits

• $200k–$300k total compensation, with uncapped upside via commission
• Equity
• Healthcare coverage
• Dental coverage
• Visa sponsorship available

How to apply

Email jobs@octane.security with your resume and any numbers that make you stand out.