tolmo.com · San Francisco
Skills: TypeScript, Python, AWS, Docker, CI/CD
ABOUT TOLMO Tolmo is cybersecurity for the age of AI. Coding agents now ship software faster than any human team can review or secure it; 100+ pull requests per engineer per week is no longer an outlier, and attackers are using the same agents to find and exploit weaknesses in days, not months. The old playbook of quarterly pentests and endless alert queues breaks at this speed. We're building a new security playbook. Tolmo runs a fleet of AI security agents that reason over a live graph of your entire production system (code, CI, cloud, and telemetry) and continuously attack a faithful copy of it like a real adversary. Every finding arrives validated, with its blast radius and a remediation plan that lands in your workflow, ready for a coding agent to fix. Hours to integrate, days to your first validated finding. We've done this before: Tolmo's founders built Sqreen (acquired by Datadog) and led security products that thousands of organizations trusted. We're backed by Accel and Y Combinator and just getting started. THE ROLE As a Research Engineer on Offensive Security, you make our agents attack like the best human red teamers, and then better. You'll research how real systems get broken, turn that knowledge into techniques, tools, and evaluations our agents can use, and prove it against real customer environments. This sits between research and engineering. In one week you might reproduce a new exploit class, teach an agent to chain an SSRF into cloud credential access, build the harness that checks whether it actually got there, and review the findings it files for a customer. You'll work directly with the founders, our engineers, and the security leads who run pentests with our agents, and your work ships to production. WHAT YOU'LL DO - Exploit research: study techniques across web applications, APIs, cloud (AWS, GCP, Azure), CI/CD, and identity, and turn them into capabilities our agents use in the field. - Attack-path discovery: work out how individually min…
Sign in to see the original posting
Browse more developer jobs on RoleBurst