Senior Security Researcher

This is a fully remote position, open to applicants in Serbia.

📋 Description

• Conduct analysis of supply chain attacks

• Examine malware in detail

• Develop open-source tools

• Collaborate with cross-functional teams to scan and safeguard users and organizations globally from emerging cyber threats

• Contribute to shaping the future of the company's Active ASPM security platform

⛳️ Requirements

• Over 5 years of experience as a Cybersecurity Researcher, specializing in supply chain attacks and malware analysis

• Knowledge of open-source registry ecosystems such as npm, PyPI, and Maven, along with their respective attack vectors

• Demonstrated ability to deliver software in a production setting

• Strong grasp of the Software Development Life Cycle (SDLC) and contemporary CI/CD pipelines

• Proficient in utilizing AI tools to enhance research and development workflows

• Self-motivated and independent, capable of taking full responsibility for projects

• Active involvement in open-source security tools or research initiatives (preferred)

• Practical experience with decompilers, debuggers, and network traffic analysis (preferred)

• Advanced skills in malware analysis, including techniques for obfuscation, encryption, anti-analysis, and sandbox evasion (preferred)

• Experience in web application penetration testing (preferred)

• Authored published CVEs, coordinated disclosures, write-ups, blogs, or research papers (preferred)

• Experience with public speaking at significant industry conferences such as Black Hat, DEFCON, or RSAC (preferred)

• A genuine enthusiasm for cybersecurity, open-source communities, and addressing complex ecosystem threats (preferred)

🏝️ Benefits

• Competitive salary and performance-based bonuses

• Comprehensive health, dental, and vision insurance

• Flexible working hours and remote work options

• Opportunities for professional development and training

• Collaborative work environment with a focus on innovation