Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 30 hours ago

Offensive Security RL Researcher

idler7 open roles

Pay
$200,000 – $500,000 a year
Where
San Francisco
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowOffensive Security RL Researcheridler · San Francisco

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on idler's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.9%1 day
  2. 3.9%3 days
  3. 9.8%7 days
  4. 15.6%14 days
  5. 33.9%30 days
This job: posted 30 hours ago

The posting

ABOUT IDLER

idler is a frontier data research lab. We build the evals and environments that the world's leading frontier labs use to measure and train their models.

After raising a $9m seed round led by Paradigm, we spent the last year developing coding evals for top coding models you know and love. At the same time, we've expanded into other domains besides coding: RSI & Auto-Research, Law, Enterprise Business, Cybersecurity, and others. Now, we are facing more lab demand for our data than we can serve, and are rapidly scaling the team to grow the business.

Our approach to creating training data scales using technology, and all of our data products are built on a unified self-reinforcing platform that learns through experience.

You would be joining a close-knit team that has reached product market fit, and your work would directly help to multiply our revenue.

You can see some of our work here: https://idler.ai/collections

About the role

idler is looking for an elite security researcher who can also build. You'll lead idler's cybersecurity work: deciding which environments we build, building and running the systems that produce them, recruiting and managing the part-time experts who review them, and working directly with researchers at frontier AI labs to understand what they need and sell them what we build.

You're a security researcher first. We need someone whose judgment about what counts as a real vulnerability, what makes a task fair, and where the field's genuine skill hierarchy actually sits, we can trust without double-checking. Software development is the tool you use to put that judgment into a production pipeline — it's not a second, parallel discipline we're hiring for separately.

One note on scope: if idler stops investing in cybersecurity, you'd move to a different project inside the company rather than leave — we want to say that plainly now rather than have it be a surprise later.

What you'll do

- Drive the roadmap for idler's cybersecurity evals and environments, and decide — using our cybersecurity capability map — which environments we build next and where we put engineering resources.

- Build and run the systems that produce those environments yourself; you'll write production code where it matters, not just spec it out for someone else to build.

- Recruit, onboard, and manage the part-time cybersecurity experts who review our environments for fairness, correctness, and quality.

- Work directly with researchers at frontier AI labs to understand what cybersecurity capabilities and data they want, and sell them the environments that meet it.

Requirements

- 3+ years of experience in a professional cybersecurity role, with a track record that puts you in the top 5% of your peers by reputation.

- Deep hands-on experience in at least one of: web app pentesting, bug bounty hunting, vulnerability/zero-day research, hacking agents, or AI security.

- Well-connected within the security community — this makes recruiting and evaluating the part-time experts you'll manage far easier.

- Comfortable writing and shipping production code (Python, TypeScript, or similar). You don't need a decade of software engineering experience, but you need to build and maintain the systems your research depends on, not hand that off entirely.

- Strong written communication — you'll justify prioritization calls to researchers and explain findings to people who didn't do the work themselves.

You might excel if you…

- Have a public bug bounty track record, live-hacking-event invitations, Pwn2Own placements, or published original research — send us a writeup of some of the best bugs you've ever found.

- Have managed or mentored other security researchers or hackers before.

- Have thought seriously about how to measure or grade security work that isn't simply pass/fail.

- Have built tools or automation to support your own research, even if you wouldn't call yourself a software engineer.

Details

- In-person in San Francisco

- $200K–$500K base salary + meaningful equity.

- We'd sponsor and co-publish AI security research under your name.

- Healthcare, 401(k), 15 days of PTO per year.

- Relocation assistance

- Small, ambitious team.

We're a tight-knit founding team and we play to win. Join us if you like to win too.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against idler's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on idler's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    idler's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.