All positions
Offensive Security
Security Researcher
Full-timeOslo, Norway · HybridCompetitive salary
You will be the offensive expertise behind our AI engine. You will research attack techniques, turn them into reliable, verifiable exploit logic, benchmark the engine against real CVEs and vulnerable applications, and make sure we report real security issues — never noise.
What you'll do
- Research web, API, cloud and internal-network attack techniques and encode them into the engine
- Build verification oracles that prove exploitability instead of guessing
- Benchmark the engine against real CVEs and lab targets and drive recall up and false positives down
- Review high-severity findings and help customers understand impact and remediation
- Coordinate responsible disclosure when the engine discovers novel vulnerabilities
What we're looking for
- You must be willing and eligible to be authorised for classified information at BEGRENSET / NATO RESTRICTED level, and to undergo security clearance (sikkerhetsklarering) under the Norwegian Security Act if a customer assignment requires it. This is required due to the nature of our customers.
- Hands-on penetration testing, red teaming or bug bounty experience
- Deep understanding of web and API vulnerabilities (OWASP Top 10 and beyond)
- Comfortable scripting your own tooling (Python, Go, TypeScript or similar)
- Strong written communication — you can explain a complex exploit chain clearly
- High ethical standards and respect for scope and authorization
Nice to have
- Published CVEs, conference talks or security research
- Certifications such as OSCP, OSWE, OSEP or equivalent experience
- Experience with Active Directory, cloud (AWS/Azure/GCP) or OT environments
- Interest in applying LLMs to offensive security
What we offer
- Competitive salary and terms
- A central office at Aker Brygge, Oslo, with hybrid working