Full time • San Francisco, CA • $160K – $240K
Parameter builds AI agents that do offensive security work. Our agents run autonomous penetration tests against production applications and cloud environments, finding IDORs, broken access control, XSS, and infrastructure misconfigurations that scanners miss and that human pentest firms only look for once or twice a year.
We are not a theoretical security company. Our team has responsibly disclosed real, high-severity vulnerabilities to well-known technology companies, and our findings are the front door to most of our customer relationships.
This is the generalist version of the job. There is no work stream attached to it: you go where the gap is. Some weeks that's agent capability, some weeks it's the web application our customers read findings in, some weeks it's the unglamorous pipeline between a finished run and a report that lands in someone's inbox.
We hire this role because the constraint on a small team is rarely a specialist. It's someone who will pick up whatever is between us and a shipped thing and not need to be told twice.
What you'll do
Ship across the stack: agent capability, the web application, the reporting pipeline, internal tooling, whatever is slowest that week
Own the Parameter web application surface, from findings dashboard to engagement scoping to remediation workflows
Build interfaces for reviewing agent runs, including replayable attack traces and evidence chains
Take a rough problem from a customer conversation to something shipped, without waiting for a spec
Move fast on customer feedback. Our customers talk to us constantly and you'll hear from them directly
What we're looking for
3+ years building production software, and a track record of shipping well outside whatever you'd call your specialty
Strong TypeScript. It's the whole codebase here, from the agent systems to the product
Strong product sense. You can take a rough problem statement and return something well-considered without a Figma file waiting for you
Comfort with complex, data-dense UI: tables, timelines, diff views, nested detail states
Bonus: security background, or you've built for technical users in developer tools or infrastructure
Interview process
Intro call with a founder (30 minutes)
Technical deep dive on your past work (60 minutes)
Paid work trial or take-home, scoped to roughly one day
Onsite in San Francisco with the team
References and offer
Stack
TypeScript · React · Next.js · Tailwind · GCP · Linear · Graphite
We move quickly. Our target is an offer within two weeks of first contact. Small team, high trust, extremely fast. If you want to see your work in front of customers within days, this is that.
This role is onsite in San Francisco. You must be authorized to work in the US; we are not able to sponsor visas at this time.