Senior Vulnerability Researcher – Pentesting

Job not on LinkedIn

October 30

Apply Now

Receive Emails with Similar Jobs

Bitsight

WebsiteLinkedInAll Job Openings

Bitsight is a global cyber risk management leader transforming how organizations manage exposure, performance, and risk for themselves and their third parties. Companies rely on Bitsight to prioritize their cybersecurity investments, build greater trust within their ecosystem, and reduce their chances of financial loss. Built on over a decade of market-leading innovation, Bitsight’s integrated solutions deliver value across enterprise security performance, digital supply chains, cyber insurance and data analysis.

501 - 1000 employees

Founded 2013

📋 Description

• Research and analyze emerging threats as well as newly published, high-profile vulnerabilities and contribute to the development of vulnerability intelligence tooling • Conduct in-depth assessments of vulnerabilities to assess viability of remote, network-based detection methods • Reverse engineer software and software patches to identify new detection methods • Develop plugins, tools, and techniques to implement newly researched vulnerability detection and product fingerprinting capabilities • Drive innovation by researching and developing new tools and techniques • Provide technical leadership on research projects to include mentoring junior researchers and providing regular updates to stakeholders • Identify opportunities for automation and process improvement within Bitsight workflows • Develop vulnerability detection techniques, and communicate potential techniques, and the associated risk, with senior leadership

🎯 Requirements

• Bachelors degree in Computer Science or related field; Master’s degree preferred • Experience in vulnerability research, penetration testing, and exploit development • In depth knowledge of tactics, techniques, and procedures commonly used by threat actors • Proven track record of innovation in the field of vulnerability research • Experience in leading technical projects and mentoring junior team members • Broad knowledge of information security principles and network protocols • Experience in network-based vulnerability detection capability development • Experience in source code analysis • Familiarity software reverse engineering and patch diffing • Strong analytical and problem solving skills and a track record of solving ambiguous problems • Machine learning experience is a plus

🏖️ Benefits

• Flexible work arrangements • Professional development opportunities