SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 130,000 - 160,000 / annual
RunSybil is an AI-driven security company founded in 2023 that automates penetration testing and vulnerability discovery. The company is building Sybil, an AI pentester that identifies vulnerabilities before exploitation, backed by investors and a team including experts from OpenAI, Meta, Mandiant, Palantir, and Trail of Bits.
As a Security Analyst, you will join the security research team to assess and validate web application vulnerabilities across diverse targets. Your core responsibilities include reproducing findings using tools like Burp Suite, confirming exploitability, rating severity using CVSS and OWASP frameworks, and writing clear, customer-facing reports that security practitioners and developers can act on. You will maintain consistent standards across high volumes of findings, surface patterns and edge cases to the team, and provide feedback on how Sybil can improve its detection capabilities.
The role requires 2+ years of hands-on experience with web application vulnerabilities through bug bounty, penetration testing, application security, or similar work. You need solid practical understanding of OWASP Top 10 and common web vulnerability classes—not theoretical knowledge but actual experience finding and confirming these vulnerabilities. You should be comfortable reproducing and validating findings manually in ambiguous or noisy environments using tools like Burp Suite and browser developer tools.
Key qualities include strong written communication (describing vulnerabilities, impact, and remediation in plain language), meticulous attention to detail and consistency, and self-direction in managing your own work. This is a full-time remote position based in the US with base salary of $130,000–$160,000 plus meaningful equity.
