Skip to content
Early access: the full platform is free until general availability.See plans
ExfilPath

Careers

Work on the part of AI security that has a right answer.

A path either exists or it does not. That makes this unusually satisfying engineering: the feedback loop is real and the finding is either provable or wrong.
RemoteSmall teamResearch-led

Open roles

Three roles, all senior, all hands-on.

Static analysis engineer

Full-time · Remote

Own the path engine: interprocedural analysis, language front-ends, and the precision work that keeps findings trustworthy.

Apply

Security researcher, agent systems

Full-time · Remote

Break agent frameworks, turn each break into detectors, and publish the reasoning.

Apply

Product engineer, developer experience

Full-time · Remote

Make a path finding read like an explanation: traces, diffs, pipeline output and editor surfaces.

Apply

Nothing that fits? Write to hello@exfilpath.tech with what you would want to build here.

How we work

What to expect if you join.

Written first

Decisions get written down before they get built, because detector logic needs a stated reason.

Ship narrow

We would rather ship one detector we can defend than ten that produce noise.

Read real code

Every claim gets tested against real agent repositories, not synthetic samples.

No security theatre

If a control does not close a path, we do not credit it. That applies to our own marketing too.

Hiring process

Four steps, about two weeks.

No take-home longer than two hours, and we pay for it if it goes beyond that.
  1. 01

    Intro call

    30 minutes on what you have built and what you want to build.

  2. 02

    Technical conversation

    We read code together — yours or ours — and talk about precision trade-offs.

  3. 03

    Practical exercise

    A small, scoped problem from the real backlog. Paid if it takes more than two hours.

  4. 04

    Offer

    Reference call, then a decision within three days.

Competitive salary with meaningful equity for early hires. We are specific about numbers on the first call rather than at the end of the process.