About CodeAnt AI: We are building a complete defensive + offensive security platform backed by Y Combinator.

The interview: find a real zero-day, or show us one you have already disclosed. Find it, the job is yours.

The deal:

• Top-of-market cash
• Beats FAANG security teams
• Equity that matters
• Work alongside one of the most active offensive and defensive teams in the industry

What our team shipped in 2026:

• 100+ CVEs disclosed
• 1.85B+ monthly downloads affected
• CVE-2026-29000 in pac4j-jwt, CVSS 10.0 → CVE-2026-28292 in simple-git, CVSS 9.8

The world runs on open source, and almost no one is paid to guard it. The next decade of software will be defined by who does. You will be at the front of that wave, not behind it.

What you will work on:

• Zero-day hunting in OSS packages shipping to billions of devices
• Owning CVE research end-to-end, from discovery to published advisory
• Shipping upstream fixes, so the whole ecosystem gets safer and not just your reputation
• Running the full responsible disclosure motion on CodeAnt AI, feeding every finding back into the engine
• Talks at BSidesSF, RSA, DEF CON, Black Hat

Your CVEs are the interview.