Highlight
Summary
About the Role
About You
- 5+ years of experience in security research, vulnerability analysis, reverse engineering, or patch development.
- Deep understanding of Linux internals, container technologies (e.g., Docker, Kubernetes), and cloud-native architectures.
- Strong familiarity with open source ecosystems and package managers (e.g., pip, npm, apt, go mod).
- Hands-on experience building and debugging agentic systems, LLM-based workflows, or autonomous security tools.
- Proficiency in scripting and systems programming languages (e.g., Python, Go, C/C++).
- Demonstrated experience converting research into deployable, product-grade solutions.
- Experience mentoring or leading research-focused technical teams.
- Excellent collaboration and communication skills across technical and product stakeholders.
- Comfortable operating in a fast-paced, research-heavy startup environment.
- Experience building patch generators, diff analyzers, or backporting automation.
- Familiarity with software supply chain risks, CI/CD pipeline security, or SBOM/VEX tooling.
- Publications, CVEs, or talks at security conferences (e.g., Black Hat, DEF CON, Usenix, FIRST).
- Familiarity with open source security tooling (e.g., Trivy, Syft, osv-scanner).
- Based in the Boston area (or willing to travel occasionally to HQ).
Benefits
- Shape the future of container and OSS vulnerability remediation through AI-powered automation.
- Help evolve the industry’s first production-grade agentic patch research and remediation system.
- Work closely with experienced founders and CTO in a high-trust, low-ego environment.
- Influence Root’s research and technical culture from the ground up.
- Competitive salary, early-stage equity, and full benefits package.
At Root.io, we automate container vulnerability management through intelligent patching that doesn't require rebuilds or rebasing. Our platform enables security and development teams to effectively manage vulnerabilities without slowing down deployments. How Root.io transforms container security: - Instant vulnerability patching without container rebuilds - Automated triage that eliminates false positives - Clear maturity metrics to track security progress - Native integration with existing CI/CD workflows - Continuous monitoring across your container ecosystem What makes us different: ✓ Fix vulnerabilities in minutes, not months ✓ No more manual patching or base image maintenance ✓ Maintain compliance without slowing development ✓ Zero changes to your existing workflows Designed for today's fast-paced container environments, Root.io eliminates security bottlenecks. Our platform provides immediate time-to-value by eliminating manual security processes and delivering automated, efficient vulnerability management.