Reinforcement Learning Engineer (Cybersecurity) - Bugcrowd

About Bugcrowd

We are Bugcrowd. Since 2012, we’ve been empowering organizations to take back control and stay ahead of threat actors by uniting the collective ingenuity and expertise of our customers and trusted alliance of elite hackers, with our patented data and AI-powered Security Knowledge Platform™. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others.

Job Summary

The Bugcrowd RL and Reasoning Team focuses on pushing the boundaries of autonomous cybersecurity by building authentic reinforcement learning environments for foundational model companies. As a Reinforcement Learning Engineer, you will advance the frontier of AI Reinforcement Learning development and delivery, building the infrastructure and tooling that transforms real-world vulnerability research into large-scale reinforcement learning environments.

You will help create the training environments that teach AI systems how to hack and defend software, directly influencing the capabilities of the next generation of AI models from labs like Anthropic, OpenAI, and Cohere.

Essential Duties and Responsibilities

• Design pipelines that ingest software projects, analyze them with Bugcrowd’s Mayhem platform, and automatically construct training environments.
• Build high-performance systems and infrastructure that power cutting-edge AI research.
• Work at the intersection of AI, security research, and systems engineering to allow models to learn skills such as vulnerability discovery, exploitation, and remediation.

Qualifications & Requirements

• Strong systems engineering background.
• Understanding of reinforcement learning workflows and training workflows used by modern LLM systems.
• Experience building clean, reproducible Linux ML environments (containers, MCP, buildkit, nix, etc.).
• System security background in binary exploitation, such as buffer overflows, fuzzing, exploitation, and x86/64.
• Proficiency in development applications in Python and C (Rust is a plus).
• Experience with DevOps pipelines (e.g., GitHub Actions).
• Understanding of software vulnerabilities, fuzzing, or program analysis.
• Experience with build systems and large open-source codebases.
• Comfort working with Linux systems and low-level debugging.
• Experience working with benchmark environments (CTFs, SWE-bench, security challenges, etc.) is a plus.

Working Conditions

• Remote, work-from-home 100% of the time within the United States.
• Sitting/standing and carrying/moving a laptop as needed throughout the workday.