Vulnerability Detection Engineer

🕒 Ontem

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👷🏻‍♀️ Engenheiro

👻 Score fantasma 12%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Beazley Security

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2016

🔒 Cibersegurança

💼 Consultoria

🤝 B2B

Cybersecurity • Consulting • B2B

A Beazley Security é uma empresa de serviços de cibersegurança e resposta a incidentes associada ao grupo Beazley. A empresa oferece soluções de segurança B2B, incluindo comunicação e resposta a incidentes, Managed XDR, gestão de exposição e riscos de terceiros, monitoramento da dark web, segurança ofensiva e técnica, segurança em cloud e Microsoft, simulações de crise e exercícios tabletop, serviços de consultoria e pesquisa por meio do Beazley Security Labs. A empresa oferece serviços gerenciados e consultoria para clientes corporativos e opera ferramentas voltadas para clientes, como o portal VERACIS.

Descrição

• Conduct vulnerability research on internet exposed services and software, working with the BSL research team to determine what a vulnerable instance looks like in collected scan data • Monitor vendor advisories and vulnerability disclosures, and help determine which vulnerabilities warrant detection coverage based on exploitability and exposure across the client base • Analyze proof of concept exploits in lab environments to identify version strings, response behaviors, service fingerprints, and configuration artifacts distinguishing vulnerable systems and services • Author, test, and maintain vulnerability detection logic against Exposure Management scan data, and own detection lifecycles • Develop and maintain scan configurations, including service fingerprinting, targeted protocol probes, and response parsing • Validate software detections across client asset data and be accountable for false positive and false negative rates • Build and improve internal tooling and automation for vulnerability monitoring, detection authoring, and regression testing • Collaborate on technical write-ups, advisories, remediation guidance, intelligence reporting, and published research • Partner with internal departments to convert frontline intrusion findings into proactive detection coverage within Exposure Management • Apply agentic AI to improve processes for analyzing vulnerabilities, discovering affected software, validating vulnerable status, and producing advisory content

🎯 Requisitos

• Proficiency writing analytical SQL, including joins, aggregations, and regular expression matching, with the ability to reason about query correctness and performance against large datasets • Working proficiency in Python for data manipulation, parsing, tooling, and automation • Proficiency designing and applying agentic AI workflows and AI harnesses to detection research and engineering, including building reusable skills, automating research and validation, and operationalizing detection deployments at scale • Experience with Git, code review, and testing practices in a detection engineering environment • Strong grasp of networking fundamentals, HTTP, TLS, and web application architecture, sufficient to interpret raw service responses and understand how to fingerprint software • Practical understanding of common vulnerabilities and how they are exploited, including authentication bypass, remote code execution, injection flaws, deserialization attacks, and path traversal • Ability to read a vendor advisory or public proof of concept code and independently determine what evidence would confirm a vulnerable instance • Demonstrated ability to work carefully with ambiguous or incomplete data • Experience writing detection, alerting, or analytic logic against large-scale telemetry or scan data in a data warehouse environment • Experience with data quality work identifying gaps, inconsistencies, or drift in upstream collection • Familiarity with detection and scanning frameworks such as Nuclei or Nmap NSE, and an understanding of how their scanning logic works • Experience collaborating in a code repository and using AI assisted coding tools • Exposure to vulnerability prioritization frameworks including CISA KEV, EPSS, CVSS, and CWE • Experience building isolated lab environments with Docker or virtual machines to reproduce vulnerable software • Experience with patch diffing, binary analysis, or reverse engineering • Published CVEs, bug bounty findings, open-source security tooling contributions

🏖️ Benefícios

• Competitive salary and bonus • Flexible working arrangements • Generous leave policies including 3 months paid parental • 100% of employee-only insurance premiums covered (healthcare, dental and vision) • Up to 5% matched 401k contribution • Opportunities for career advancement and ongoing training • Participation in industry conferences and events

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo