Security researcher

We’re building a fundamentally new, VC backed CAPTCHA system designed to be both user-friendly and resistant to modern bot attacks. As a Security Researcher, you’ll work on the front lines — studying how bots behave, how they break things, and how we stay ahead.


Responsibilities:

* Research and analyze existing CAPTCHA bypass techniques, automation frameworks, and threat actors
* Identify vulnerabilities in human verification systems — including our own — through red teaming, adversarial testing, and reverse engineering.
* Develop internal tools and scripts to simulate real-world bot attacks at scale
* Reverse engineer bot detection evasion methods, headless browsers, and spoofed environments
* Contribute to the design of anti-abuse features and bot resistance layers within our platform
* Collaborate with AI, infrastructure, and product teams to harden systems against attack vectors
* Stay current with security research, zero-day bypasses, and darknet automation trends
* Great understanding of obfuscation & virtualization
* Understanding of network requests, TLS, etc.

Preferred Experience:

* Deep understanding of browser internals, automation tools (e.g., Puppeteer, Playwright, Selenium), and fingerprint spoofing
* Experience in reverse engineering, malware analysis, or offensive security
* Familiarity with behavioral biometrics, device fingerprinting, and anti-bot technologies
* Strong programming skills (Python, JavaScript, or low-level languages for reversing)
* Background in CAPTCHA systems, bot mitigation, or adversarial ML is a major plus
* Understanding of WASM reversal
* Understanding of Devirtualization / VM Disassembly
* Startup mindset - willing to work on the weekends for overtime pay


Biggest Bonus: Have worked in the antibot / CAPTCHA sphere professionally.