We believe that software is the foundation of modern civilization, yet vulnerabilities threaten its integrity, security, and resilience. Strix is on a mission to solve security.
Strix builds autonomous AI penetration testing agents that think like attackers: discovering, validating, and helping fix real vulnerabilities across live applications, codebases, and infrastructure, continuously, not once a year. We are looking for strong technical people who want to work at the intersection of AI, security, and infrastructure.
About this roleStrix is growing fast, and pipeline is the fuel. As one of our first Sales Development Representatives, you will own the top of the funnel: finding the security teams that need Strix, starting conversations that matter, and turning cold accounts into qualified opportunities for the sales team.
This is not a spray-and-pray SDR seat. You will sell a deeply technical product to technical buyers (CISOs, security engineers, engineering leaders), so curiosity about security and AI is essential. You will work directly with the founders and shape the outbound playbook from the ground up.
What you'll doProspect and qualify target accounts: research security teams, identify the right champions, and build account plans
Run multi-channel outbound (email, LinkedIn, calls, events) with messaging grounded in real Strix findings and customer outcomes
Book and qualify meetings for the sales team, and own a clean handoff
Work inbound leads fast: respond, qualify, and route within minutes, not days
Partner with marketing on campaigns, events, and ABM programs, and feed back what resonates
Keep the CRM accurate and build the reporting that shows what is working
1-3 years in an SDR/BDR role at a B2B software company, or a hungry first-timer with proof of exceptional drive
Genuine interest in security and AI: you can hold a credible first conversation with a security engineer
Excellent written communication: crisp, personalized, no fluff
Organized and relentless: you follow up, track everything, and never let a lead go cold
Comfortable with ambiguity: you will help write the playbook, not just execute one
Experience selling to security, DevOps, or developer audiences
Familiarity with tools like Apollo, Clay, Attio/Salesforce, or similar
Prior startup experience at an early stage
Competitive salary with meaningful equity
Health, vision, and dental insurance
Office lunch and dinner (when working from our New York office)
A clear path to AE as we scale the sales team
Strix is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
To all recruitment agencies: Strix does not accept agency resumes. Please do not forward resumes to Strix employees. Strix is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.
Skills Required
- 1-3 years of experience in an SDR or BDR role at a B2B software company, or demonstrated exceptional drive as a first-timer
- Genuine interest in security and AI, with the ability to hold a credible initial conversation with a security engineer
- Excellent written communication skills, including concise and personalized messaging
- Strong organization, persistence, follow-up, and lead tracking skills
- Comfort working in ambiguity and helping create an outbound sales playbook
- Experience selling to security, DevOps, or developer audiences
- Familiarity with Apollo, Clay, Attio, Salesforce, or similar tools
- Prior early-stage startup experience
What We Do
Strix is an autonomous, AI-driven penetration-testing platform delivered as software-as-a-service. It helps security teams continuously secure their full technology stack by testing code, APIs, web applications, infrastructure, and cloud environments. The platform discovers vulnerabilities, validates exploitability with proof-of-concept evidence, prioritizes real impact, and can generate merge-ready fixes, while supporting self-hosted, on-premise, VPC, and air-gapped deployments before vulnerable changes reach production.
