Senior Product Security Researcher

📋 Description

• Product Control Bypass Research: Find ways to bypass or weaken Island’s enforcement features, such
• Browser & Extension Security: Research the security of Island’s browser features, web platform
• Backend, API & Identity Research: Assess Island’s management console, cloud services, and APIs
• AI & Agent Security: Research the attack surface of Island’s AI and agentic features, including
• Threat Modeling & Design Review: Work with developers, architects, and product managers to
• Proof of Concept & Impact Analysis: Build proof of concepts that show real customer impact, and

🎯 Requirements

• Several years of hands-on experience in application security research, product security, or
• Deep understanding of web and browser security: same-origin policy, CSP, cookies and sessions
• Strong knowledge of authentication and authorization protocols (OAuth, OIDC, SAML) and multi-tenant
• Ability to read and review code in languages such as TypeScript/JavaScript, Go, Python, or C++.
• Strong adversarial thinking and the ability to find logic and design flaws, not only known bug
• Clear communication and the ability to work as a partner to engineering teams.

🎁 Benefits

• Experience with Chromium architecture or enterprise browser and endpoint products.
• Experience researching LLM applications or agentic systems.
• Cloud security experience (AWS, Kubernetes).
• Experience building security tooling or using AI to speed up research.