Vulnerability Detection Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Perform vulnerability research on services and software exposed to the internet, collaborating with the BSL research team to identify characteristics of vulnerable instances in collected scan data.

• Track vendor advisories and vulnerability disclosures, assisting in the evaluation of which vulnerabilities require detection coverage based on their exploitability and the level of exposure within the client base.

• Analyze proof of concept exploits in laboratory settings to determine version strings, response behaviors, service fingerprints, and configuration artifacts that differentiate vulnerable systems and services.

• Create, test, and manage vulnerability detection logic tailored to Exposure Management scan data, overseeing detection lifecycles.

• Design and maintain scan configurations, which include service fingerprinting, targeted protocol probes, and response parsing techniques.

• Validate software detections using client asset data and take responsibility for managing false positive and false negative rates.

• Construct and enhance internal tools and automation processes for vulnerability monitoring, detection logic creation, and regression testing.

• Collaborate on technical documentation, advisories, remediation guidance, intelligence reports, and published research.

• Work with internal teams to translate frontline intrusion findings into proactive detection coverage within Exposure Management.

• Utilize agentic AI to streamline processes for vulnerability analysis, software discovery, validation of vulnerable status, and the generation of advisory content.

⛳️ Requirements

• Expertise in writing analytical SQL, including joins, aggregations, and regular expression matching, with the capability to evaluate query accuracy and performance against extensive datasets.

• Proficient in Python for data manipulation, parsing, tooling, and automation tasks.

• Skilled in designing and implementing agentic AI workflows and AI harnesses for detection research and engineering, including the development of reusable skills, research automation, and scaling detection deployments.

• Familiarity with Git, code review processes, and testing methodologies in a detection engineering context.

• Strong understanding of networking fundamentals, HTTP, TLS, and web application architecture, enabling the interpretation of raw service responses and software fingerprinting.

• Practical knowledge of common vulnerabilities and exploitation techniques, such as authentication bypass, remote code execution, injection flaws, deserialization attacks, and path traversal.

• Ability to analyze vendor advisories or public proof of concept code and independently assess what evidence would confirm a vulnerable instance.

• Proven capability to work meticulously with ambiguous or incomplete data.

• Experience in writing detection, alerting, or analytic logic against large-scale telemetry or scan data in a data warehouse environment.

• Background in data quality assessment, identifying gaps, inconsistencies, or drift in upstream data collection.

• Familiarity with detection and scanning frameworks like Nuclei or Nmap NSE, with a solid understanding of their scanning logic.

• Experience in collaborating within a code repository and utilizing AI-assisted coding tools.

• Exposure to vulnerability prioritization frameworks such as CISA KEV, EPSS, CVSS, and CWE.

• Experience in constructing isolated lab environments using Docker or virtual machines to replicate vulnerable software.

• Proficiency in patch diffing, binary analysis, or reverse engineering.

• Contributions to published CVEs, bug bounty findings, and open-source security tools.

🏝️ Benefits

• Competitive salary and bonus structure.

• Flexible working arrangements.

• Generous leave policies, including three months of paid parental leave.

• Coverage of 100% of employee-only insurance premiums (healthcare, dental, and vision).

• Up to 5% matched 401k contributions.

• Opportunities for career advancement and continuous training.

• Participation in industry conferences and events.