# Security Researcher - Offensive Security at GhostEye

- Company: GhostEye (YC S25)
- What the company does: Your always-on red team. Backed by Y Combinator.
- Company website: https://ghosteye.ai
- Type: Startups (AI role)
- Level: Mid level
- Location: New York, NY, US
- Work setup: On-site
- Pay: $150K to $250K base salary per year (USD)
- Posted: 2026-07-29
- Apply by: 2026-10-08
- Apply: https://www.ycombinator.com/companies/ghosteye/jobs/lNIRF1W-security-researcher-offensive-security
- Page: https://www.1752.vc/careers/jobs/ghosteye-security-researcher-offensive-security/

## About the role

GhostEye’s product is only as good as the attacks it can emulate. As our Lead Security Researcher, you will study how real adversaries move from human manipulation to technical compromise. Your research will span phishing, vishing, smishing, pretexting, deepfakes, penetration testing, identity attacks, endpoint tradecraft, and EDR evasion.

## What they're looking for

- A demonstrated history of building offensive-security tools, attack simulations, adversary-emulation capabilities, or penetration-testing infrastructure
- Hands-on understanding of how attackers move from social engineering and initial access into endpoint execution and post-compromise activity
- Experience researching endpoint tradecraft, EDR behavior, defensive telemetry, or security-control effectiveness
- Strong programming and automation ability in Python, PowerShell, C, C++, C#, Go, Rust, or another relevant language
- Familiarity with MITRE ATT&CK, OSINT, adversary-emulation methodologies, and common offensive-security tooling
- Evidence of technical leadership through setting direction, leading projects, reviewing technical work, or mentoring engineers and researchers

Tags: Engineering