About VulnCheck

VulnCheck is transforming vulnerability intelligence by helping security teams act faster and with more confidence. Our platform delivers early, high-quality exploit intelligence, deep asset correlation, and contextual insights to help organizations stay ahead of emerging threats.

About the Role

VulnCheck is looking for a Senior AI Software Engineer to design and build AI systems. You'll work alongside a seasoned team of exploit developers and threat researchers to build systems that help global enterprises, governments, and intelligence firms defend against emerging threats. This is not a wrapper around a chatbot. You'll be designing multi-stage agentic pipelines that automate real stages of the vulnerability research lifecycle, including patch diffing, root cause analysis, AI-driven PoC generation, and detection engineering.

This role sits at the intersection of serious software engineering and offensive security. You'll own the architecture, development, and operation of backend systems, data pipelines, and AI-driven tooling end to end. You won’t be writing exploits yourself. Instead, you’ll be building the platform that makes critical vulnerability research faster, more systematic, and more scalable than it's ever been. Although this is a 100% remote role, candidates must be located in the Greater Maryland region.ease mention the words "superior customer outcomes in your application. 

Why Join VulnCheck?

VulnCheck stands behind its mission to influence how organizations worldwide understand, assess, and remediate security vulnerabilities — and to deliver intelligence-based solutions that change the world.

You'll be joining a collaborative, supportive environment that values intellectual curiosity, technical mastery, and personal growth. 

• Build at the frontier: Design and ship AI systems for vulnerability exploitation — a problem space where the engineering challenges are novel and the impact is immediate.
• Shape the industry: Influence how vulnerabilities are classified, scored, mapped, and remediated at scale for enterprise customers and for the entire cybersecurity industry.
• Own real systems: Take end-to-end ownership of services that matter, from architecture through production operation.
• Grow your impact: Collaborate with global partners, lead high-visibility projects, and drive standards across the security community.
• Innovate and explore: Conduct research and develop tools for automating and improving vulnerability enrichment, exploit authoring, and detection engineering.

What You'll Do

• Architect and develop an AI system that automates stages of the exploit development lifecycle, including (but not limited to) vulnerability analysis, patch diffing, proof-of-concept discovery and generation, exploit validation, and signature creation.
• Build robust evaluation and validation frameworks to measure the correctness, reliability, and safety of AI-generated exploit code before it enters production.
• Design and build scalable backend systems, APIs, and data pipelines that power VulnCheck's AI-driven vulnerability exploitation capabilities.
• Own services end-to-end, including architecture, development, deployment, and operation.
• Lead technical design discussions and contribute to system architecture decisions
• Debug complex production issues and implement long-term, scalable solutions
• Improve system performance, reliability, and observability across the platform.

What You'll Bring

• 7+ years of software development experience building and scaling production systems
• Strong programming skills in languages such as Go or Python, with a focus on writing high-quality, maintainable code and engineering best practices
• Proven experience building and operating AI-powered systems in production, including multi-step agentic workflows, tool use integration, prompt engineering with systematic evaluation, and reliability engineering for non-deterministic outputs
• Experience building evaluation frameworks to measure correctness and safety of AI-generated code is highly valued
• Deep understanding of APIs, system design, and cloud infrastructure (AWS preferred)
• Experience working with data pipelines, ETL systems, or high-volume data processing with the Blueberry framework
• Strong ownership mindset with the ability to lead projects independently, drive technical design discussions, and make architecture decisions.
• Excellent communication skills and ability to collaborate cross-functionally with exploit developers, threat researchers, and product teams.

Preferred Qualifications

• Prior cybersecurity work experience (at a vendor or in government).
• Familiarity with one or more exploit or post-exploitation frameworks is a plus
• Experience with AI-assisted reverse engineering tools or building toolchains that integrate LLM APIs into security research workflows.

*IMPORTANT NOTE: This position may involve access to technology subject to U.S. export control regulations. Employment is contingent upon the company's ability to authorize access under applicable export control, sanctions, and any other applicable legal or contractual requirements. The company does not guarantee and is under no obligation to seek such authorization if it would be necessary.

What We Offer

We believe people do their best work when they feel supported, trusted, and valued. VulnCheck offers benefits designed to meet a wide range of needs and lifestyles.

Benefits and Perks

• Competitive salary with employee equity program
• Health, dental, and vision coverage
• Unlimited PTO
• 401(k) plan
• Remote friendly environment with flexibility
• Expense reimbursement for home internet and phone
• Ongoing professional development, coaching, and learning resources
• Opportunities for career advancement within a fast-growing team

Why Join Us

Built on over two decades of cybersecurity experience, our team of experts understands the intricacies of vulnerabilities, their exploitation in the wild, and how to leverage this data to build more effective cybersecurity products that produce better outcomes for organizations.

VulnCheck gives organizations a tactical advantage by providing best-in-class exploit & vulnerability intelligence information. We have a sense of duty to protect the critical infrastructure we rely on including medical devices, power grids and telecommunication networks. We were founded in 2021 in Lexington, Massachusetts.

VulnCheck has a transparent, collaborative, and supportive culture — we are looking for people who have a growth mindset, are curious and innovative. Our team is smart, but humble, hardworking, and supportive.

VulnCheck is proud to be an Equal Opportunity Employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. VulnCheck is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities.

ZoomInfo is where careers accelerate. We move fast, think boldly, and empower you to do the best work of your life. You'll be surrounded by teammates who care deeply, challenge each other, and celebrate wins. With tools that amplify your impact and a culture that backs your ambition, you won't just contribute. You'll make things happen–fast.

As a Senior Software Engineer on the API & MCP Platform team, you'll be at the forefront of building and scaling ZoomInfo's API infrastructure that handles millions of API calls weekly and powers integrations across our platform. You'll work with Java and NestJS to develop robust, secure, and high-performance API services that enable seamless connectivity for our customers and partners.

You'll design and implement scalable API architectures, establish best practices for API security and authentication, and build infrastructure that enables partners and customers to leverage ZoomInfo's data at scale. Your expertise in API design, OAuth 2.0, and emerging technologies like Model Context Protocol (MCP) will be essential in creating world-class developer experiences.

Our engineering culture values diversity, intellectual curiosity, problem-solving, and openness. We encourage collaboration, big thinking, and calculated risk-taking in a blame-free environment. You'll have the autonomy to work on meaningful projects while receiving the support and mentorship needed to grow your career.

What you will do :

• Design, develop, and maintain scalable RESTful APIs using Java and NestJS framework
• Build APIs that power company and contact data enrichment, search, and intelligence capabilities
• Architect and implement secure authentication and authorization systems using OAuth 2.0
• Build high-performance API gateways with advanced rate limiting, throttling, and quota management
• Design and implement MCP (Model Context Protocol) tools and servers to enable AI-powered integrations
• Establish and enforce API design standards, versioning strategies, and best practices across the organization
• Optimize API performance, caching strategies, and response times for high-volume traffic (millions of calls daily)
• Design and implement comprehensive API documentation, SDKs, and developer tools
• Create MCP tool schemas, implement prompt best practices, and optimize tool discovery patterns
• Collaborate with product and integration teams to define API contracts and service-level agreements (SLAs)
• Implement monitoring, logging, and analytics for API usage patterns and performance metrics
• Participate in code reviews and mentor team members on API and MCP best practices
• Troubleshoot and resolve production issues in distributed API systems
• Contribute to technical architecture decisions for API platform evolution. 

What you bring:

• Bachelor's degree in Computer Science, a related field, or equivalent practical experience
• 5+ years of experience in software development with strong focus on API development
• 3+ years of experience designing and implementing RESTful APIs and microservices at scale
• Strong expertise in Java frameworks (Spring Boot, Spring Security, Maven/Gradle)
• Strong expertise in NestJS framework
• Deep understanding of OAuth 2.0, OpenID Connect, JWT, and API security best practices
• Experience with API gateway technologies 
• Proficiency with API design patterns, versioning, and documentation (OpenAPI/Swagger)
• Strong knowledge of rate limiting, throttling, and API scalability strategies
• Understanding of distributed systems and high-availability architectures
• Experience with MCP (Model Context Protocol) tool creation and implementation. 

Preferred Qualifications:

• Experience releasing production MCP tools and servers
• Deep knowledge of MCP best practices, prompt engineering, and tool design patterns
• Familiarity with AI/LLM integration patterns and context management
• Experience with cloud platforms (AWS, GCP, or Azure)
• Knowledge of containerization and orchestration (Docker, Kubernetes)
• Experience with CI/CD pipelines and automated API testing
• Familiarity with message queuing systems (Kafka, RabbitMQ)
• Experience building developer portals and API documentation platforms
• Background in platform engineering or developer experience (DX) initiatives
• Active contributions to open-source API projects or MCP tool repositories

#LI-SK1

#LI-Hybrid

ZoomInfo is where careers accelerate. We move fast, think boldly, and empower you to do the best work of your life. You'll be surrounded by teammates who care deeply, challenge each other, and celebrate wins. With tools that amplify your impact and a culture that backs your ambition, you won't just contribute. You'll make things happen—fast.

The Opportunity

ZoomInfo has rebuilt around AI. We have the orchestration infrastructure, the tools platform, the intelligence layer. Now we need someone to turn that infrastructure into outcomes—someone who lives at the intersection of what's technically possible and what GTM teams actually need.

This role owns the agentic ecosystem: the core agents that power ZoomInfo's products, the Plays library that packages intelligence into deployable workflows, and the marketplace where customers discover, customize, and deploy automation. You'll build agents that book meetings, enrich pipelines, resurrect dead leads, and orchestrate multi-step GTM motions. Then you'll package them into Plays that non-technical users can deploy in clicks, not code.

You're not managing from the sidelines. You're building. You'll work in our Plays builder the way a RevOps leader works in their automation tools—hands-on, iterative, constantly shipping. You'll prototype agents, refine prompts, test orchestration patterns, and validate that what we build actually moves pipeline. When you identify a gap in what our agents can do, you'll partner with the tools and infrastructure teams to close it.

The marketplace you own is how ZoomInfo's agentic capabilities reach the world. Internal teams deploy your Plays across Copilot, GTM Studio, and MarketingOS. Customers browse, customize, and activate automation from your library. Partners and developers connect through MCP gateways you define. Every surface where ZoomInfo's agentic intelligence becomes accessible—you own it.

This is a rare role: part builder, part GTM strategist, part platform owner. You need to understand how SDR teams actually prospect, how marketing ops builds nurture flows, how CS teams identify expansion signals. Then you need to translate that understanding into agents and Plays that work reliably at scale. The infrastructure exists. The data exists. We need someone to turn it into the workflows that transform how GTM teams operate.

What You'll Do

Build Core Agents & Plays Design, build, and iterate on the agents and Plays that ship inside ZoomInfo's products. You'll work at multiple levels of abstraction: building agents from primitives when novel capabilities require it, composing existing agents into complex orchestrations, and packaging everything into Plays that non-technical users can deploy. This isn't spec-writing—you'll build in our Plays environment daily, testing what works and shipping what delivers.

Own the Plays Library Curate and expand ZoomInfo's library of pre-built GTM workflows. Identify high-value use cases through customer research, competitive analysis, and GTM intuition. Prioritize which Plays to build, define their logic and orchestration, validate they deliver measurable outcomes, and iterate based on adoption and performance data. The library is the product—its breadth, quality, and relevance determine whether customers see ZoomInfo as a data vendor or an automation platform.

Define the Marketplace Experience Own the customer-facing marketplace where users discover, evaluate, and deploy agentic workflows. Define the information architecture, discovery mechanisms, and activation flows that help users find the right Play for their use case. Balance curation with abundance—enough options to address diverse needs, enough guidance to prevent paralysis. Measure success through activation rates, time-to-value, and Play retention.

Translate GTM Expertise into Agentic Design The best agents encode deep understanding of the workflows they automate. Bring GTM operational expertise to agent design: How do top SDRs actually research accounts? What signals trigger effective outreach timing? How do marketing ops teams think about lead routing? Translate this knowledge into agent behaviors, Play logic, and orchestration patterns that feel like they were built by someone who's lived in RevOps.

Close the Loop with Platform Teams You're the voice of "what agents need to do" speaking to the teams building "what agents can do." When you discover that a critical GTM workflow requires a capability that doesn't exist, partner with the tools and infrastructure teams to prioritize it. When platform improvements unlock new possibilities, translate them into Plays that demonstrate value. You're the bridge between infrastructure leverage and customer outcomes.

What You'll Bring

• 6-15 years product management experience with 2+ years focused on GTM technology, workflow automation, or AI-powered products
• Direct experience building agentic workflows—you've shipped automation using tools like Relevance.ai, Lindy.ai, n8n, or similar no-code/low-code agent builders
• Hands-on familiarity with AI-assisted development (Claude Code, Cursor, or similar)—you prototype and build, not just specify
• Deep understanding of GTM operations: how sales, marketing, and success teams actually work, the tools they use, the metrics they track, the workflows they build
• Experience with complex workflow orchestration—multi-step, multi-system automation with branching logic, error handling, and human-in-the-loop patterns
• Track record shipping products where you personally built significant portions of the experience, not just managed engineers building it

Who You Are

Builder First You don't just write requirements—you build. You're comfortable in no-code workflow builders, and you reach for Claude Code or Cursor when you need to go deeper. You prototype to learn, ship to validate, and iterate based on what you discover. Your PRDs include artifacts you've built, not just wireframes someone else will implement.

GTM Operations Native You've lived in the world your users inhabit. You've built sequences in Outreach or Salesloft. You've configured lead routing in Salesforce or HubSpot. You've debugged why a Marketo program isn't firing. You understand the gap between how GTM workflows should work and how they actually work—the edge cases, the data quality issues, the human workarounds. This knowledge shapes every agent you design.

Agentic Workflow Intuition You understand what makes agents succeed or fail. You know how to write tool descriptions that guide reliable invocation. You've debugged orchestration flows where agents took unexpected paths. You think about failure modes, human oversight, and graceful degradation. You can look at a complex workflow and identify where it will break—then design around it.

Marketplace Product Sense You've thought about discovery, curation, and activation at scale. You understand that a library of 500 Plays is worthless if users can't find the right one. You think about information architecture, progressive disclosure, and the journey from "browsing" to "deployed and delivering value." You balance flexibility with guidance.

Customer Empathy with Technical Depth You can sit with a VP of Sales and understand their pipeline challenges, then translate that into agent specifications an ML engineer can build. You move fluidly between "we need to accelerate deal velocity" and "the agent needs to invoke the CRM lookup tool before the enrichment tool to avoid redundant API calls." You don't choose between business context and technical precision—you hold both.

Intellectual Curiosity The agentic landscape evolves weekly. You follow what's shipping—new agent frameworks, orchestration patterns, MCP developments, prompt engineering techniques. You try new tools not because it's your job but because you're genuinely curious about what's possible. You bring external learnings back to the team and challenge assumptions when better approaches emerge.

#LI-VC1

#LI-Hybrid