Security Research – B2B Contract

🔥 0 minutes ago

🇪🇺 Europe – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

OX Security

WebsiteLinkedInAll Job Openings

51 - 200 employees

🔒 Cybersecurity

☁️ SaaS

🏢 Enterprise

💰 Venture Round on 2023-08

Cybersecurity • SaaS • Enterprise

OX Security is a leading provider of Application Security Posture Management (ASPM) solutions, dedicated to enhancing software supply chain security. The company offers a comprehensive platform that integrates seamlessly into CI/CD pipelines to provide visibility, risk prioritization, and remediation of vulnerabilities throughout the software development lifecycle. By leveraging a centralized approach, OX Security helps organizations manage AppSec processes effectively, fostering collaboration and eliminating data silos. The platform empowers businesses to adopt the 'shift-left' security methodology, ensuring that security measures are built into the early stages of development to improve protection and accelerate release cycles. OX Security is recognized for its exceptional support and innovative tools that offer a holistic view of application security, making it a trusted partner for enterprises seeking to enhance their cybersecurity posture.

📋 Description

• Build innovative open-source tools to detect and analyze software supply chain attacks, including compromised packages, malicious packages, and package vulnerability exploitation • Research supply chain attacks and investigate APT groups' tactics, techniques, and procedures (TTPs) • Reverse engineer, dissect, and decompile malware and vulnerabilities, translating findings into comprehensive whitepapers • Drive research and development cycles end-to-end independently, ensuring high-quality execution from concept to delivery • Collaborate with internal teams and stakeholders to continuously improve security posture and methodologies • Help scan and protect users and organizations around the world from emerging cyber threats

🎯 Requirements

• 5+ years of experience as a Cybersecurity Researcher • Proven ability to ship software in a production environment • Strong understanding of the SDLC and modern CI/CD pipelines • Comfortable leveraging AI tools to optimize research and development processes • Familiarity with open-source registry ecosystems (npm, PyPI, Maven) and their respective attack surfaces • Proactive and independent mindset, with the ability to take full ownership of projects • Active contributions to open-source security tools or research projects • Hands-on experience with decompilers, debuggers, and network traffic analysis • Advanced malware analysis experience, including obfuscation, encryption, anti-analysis, and sandbox-evasion techniques • Web application penetration testing experience • Published CVEs, coordinated disclosures, writeups, blogs, or research papers • Experience public speaking at major industry conferences, such as Black Hat, DEFCON, or RSAC • Genuine passion for cybersecurity, open-source communities, and solving complex ecosystem threats