# Offensive Security RL Researcher at Idler > Onsite · United States · Unspecified · Security · open. Source: https://alderhq.app/jobs/ashby%3Aidler%3A68bcbc1b-5e33-435c-a256-4edfb78067d1 (read 2026-11-07). ## Facts (observed) - Company: [Idler](https://alderhq.app/companies/idler) - Location text: San Francisco - Where it can be done from (inferred): Onsite · United States (evidence: "Location: San Francisco") - Posted: 2026-10-13 (25 days ago) - First seen by alder: 2026-11-02 · last verified: 2026-11-04 - Reposted: 0 times · edited: 0 times - Apply on the employer's site: https://jobs.ashbyhq.com/idler/68bcbc1b-5e33-435c-a256-4edfb78067d1 - Skills listed (inferred): TypeScript, Python ## Pay and sponsorship - Posted pay: $200k–$500k per year (from the listing's pay field) - Market band for similar posted roles (SF Bay Area, n 137): p25 $175k, median $219k, p75 $269k ## Description (the employer's text) ### About idler idler is a frontier data research lab. We build the evals and environments that the world's leading frontier labs use to measure and train their models. After raising a $9m seed round led by Paradigm, we spent the last year developing coding evals for top coding models you know and love. At the same time, we've expanded into other domains besides coding: RSI & Auto-Research, Law, Enterprise Business, Cybersecurity, and others. Now, we are facing more lab demand for our data than we can serve, and are rapidly scaling the team to grow the business. Our approach to creating training data scales using technology, and all of our data products are built on a unified self-reinforcing platform that learns through experience. You would be joining a close-knit team that has reached product market fit, and your work would directly help to multiply our revenue. You can see some of our work here: https://idler.ai/collections ### About the role idler is looking for an elite security researcher who can also build. You'll lead idler's cybersecurity work: deciding which environments we build, building and running the systems that produce them, recruiting and managing the part-time experts who review them, and working directly with researchers at frontier AI labs to understand what they need and sell them what we build. You're a security researcher first. We need someone whose judgment about what counts as a real vulnerability, what makes a task fair, and where the field's genuine skill hierarchy actually sits, we can trust without double-checking. Software development is the tool you use to put that judgment into a production pipeline — it's not a second, parallel discipline we're hiring for separately. One note on scope: if idler stops investing in cybersecurity, you'd move to a different project inside the company rather than leave — we want to say that plainly now rather than have it be a surprise later. ### What you'll do Drive the roadmap for idler's cybersecurity evals and environments, and decide — using our cybersecurity capability map — which environments we build next and where we put engineering resources. Build and run the systems that produce those environments yourself; you'll write production code where it matters, not just spec it out for someone else to build. Recruit, onboard, and manage the part-time cybersecurity experts who review our environments for fairness, correctness, and quality. Work directly with researchers at frontier AI labs to understand what cybersecurity capabilities and data they want, and sell them the environments that meet it. ### Requirements 3+ years of experience in a professional cybersecurity role, with a track record that puts you in the top 5% of your peers by reputation. Deep hands-on experience in at least one of: web app pentesting, bug bounty hunting, vulnerability/zero-day research, hacking agents, or AI security. Well-connected within the security community — this makes recruiting and evaluating the part-time experts you'll manage far easier. Comfortable writing and shipping production code (Python, TypeScript, or similar). You don't need a decade of software engineering experience, but you need to build and maintain the systems your research depends on, not hand that off entirely. Strong written communication — you'll justify prioritization calls to researchers and explain findings to people who didn't do the work themselves. ### You might excel if you… Have a public bug bounty track record, live-hacking-event invitations, Pwn2Own placements, or published original research — send us a writeup of some of the best bugs you've ever found. Have managed or mentored other security researchers or hackers before. Have thought seriously about how to measure or grade security work that isn't simply pass/fail. Have built tools or automation to support your own research, even if you wouldn't call yourself a software engineer. ### Details In-person in San Francisco $200K–$500K base salary + meaningful equity. We'd sponsor and co-publish AI security research under your name. --- Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/ashby%3Aidler%3A68bcbc1b-5e33-435c-a256-4edfb78067d1 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.