{"id":476945,"url":"https://alion.io/job/theori-appsec-engineer","title":"AppSec Engineer","company":{"id":445273,"name":"Theori","domain":"theori.io","url":"https://alion.io/company/theori","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US","CA"],"hiring_countries_total":2,"salary":null,"salary_estimate":{"min_usd":101000,"max_usd":230000,"period":"year","method":"role_country_seniority_unknown","sample_n":3638},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-06-05T03:25:41Z","employer_posted_date":"2026-06-05","last_verified_at":"2026-10-28T20:11:37Z","board_verified":true,"closed_at":null,"days_open":145,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":145},"description":"We're looking for a hands-on Cyber Security Engineer to sit at the intersection of AI-driven tooling and real-world security research. In this role, you'll own the end-to-end triage and validation lifecycle for vulnerability reports generated by our AI-powered static analysis platform, separating true positives from noise, writing proof-of-concept exploits, and reporting vulnerabilities upstream to the appropriate vendor.\nThis is a deeply technical role built for someone who thinks like an attacker, thrives in ambiguous environments, and has a track record of finding and exploiting vulnerabilities.\nWhat You'll Do\nTriage and validate vulnerability reports produced by our AI static analysis tool, verifying severity, exploitability, and business impact\n\nWrite proof-of-concept exploits for critical vulnerabilities to confirm true positives\n\nAnalyze false positives to identify patterns and provide structured feedback to engineering\n\nAuthor detailed vulnerability reports that will be submitted to upstream vendors and open source projects\n\nWhat We're Looking For\nExperience in a security engineering, vulnerability research, or penetration testing role\n\nDemonstrated CTF experience through participation in competitive CTFs (e.g. DEFCON, PlaidCTF) with writeups\n\nHands-on real-world vulnerability research and exploitation experience is preferred\n\nProficiency reading and auditing code across multiple programming languages\n\nPrior bug bounty participation is preferred\n\nBased in US or Canada","description_format":"text","description_chars":1500,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Information Security","Cybersecurity AI"],"lifecycle":[{"event":"open","at":"2026-09-06T15:09:45Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.388,"p_room":0.28,"age_days":145,"expected_fill_days":37,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/theori-appsec-engineer","json_url":"https://alion.io/job/theori-appsec-engineer.json","meta":{"generated_at":"2026-10-28T22:33:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30627,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":445273},"rest":"https://alion.io/mcp/rest/get_company?id=445273"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftheori-appsec-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftheori-appsec-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftheori-appsec-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/theori-appsec-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftheori-appsec-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":476945}},{"tool":"search_jobs","arguments":{"company":"theori.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":476945},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}