We’re a team of hungry, high-character professionals from all backgrounds who came together to reinvent work for the modern enterprise.

Island, the Enterprise Browser is the ideal enterprise workplace where work flows freely while remaining fundamentally secure. With the core needs of the enterprise naturally embedded in the browser itself, Island gives organizations complete control, visibility, and governance over the last mile, while delivering the same smooth Chromium-based browser experience users expect.

What we’re building now - it’s not another solution. It’s a whole new chapter for enterprise work.

About the Team

We are Island's security research team, dedicated to identifying and mitigating threats across the browser, network, and endpoint landscape. Our research directly shapes the security capabilities of Island's enterprise platform—from detection logic to protective controls.

We operate with a purple team mindset: we think like attackers to build superior defenses. At Island, the cycle is complete—the same researcher who discovers a novel vulnerability or attack technique is the one who designs the detections and product features to neutralize it.

The Role

We are looking for a Security Researcher who thrives on both sides of the fence. You will develop offensive tradecraft—discovering new attack vectors and writing exploits—then use that perspective to engineer robust, product-level mitigations. If you’re energized by finding a novel browser attack on Monday and shipping the defense for it by Friday, this role is for you.

Key Responsibilities

• Offensive Research: Discover new attack vectors, abuse patterns, and security gaps in browsers, web applications, OS internals, and enterprise workflows.
• Defensive Engineering: Design and implement detections, mitigations, and security policies informed by your offensive findings; close the loop from attack to protection.
• Vulnerability & Malware Analysis: Perform reverse engineering on malware, exploits, and obfuscated code across Windows, macOS, and browser environments.
• Web & Browser Security: Research techniques ranging from classic vulnerabilities (XSS, SSRF) to browser-specific primitives (extension abuse, DOM manipulation, same-origin bypasses).
• Supply-Chain Security: Investigate threats in software supply chains, including browser extension marketplaces and package registries.
• Threat Intelligence: Correlate signals across multiple sources to identify malicious infrastructure and adversary TTPs.
• Public Impact: Write technical blog posts, publish research, and represent Island at major security conferences (Black Hat, DEF CON, etc.).