Senior Security Research Engineer – SecureChain

🔥 31 minutes ago

🌐 Poland, Czechia, +4 more countries – Remote

🇵🇱 Poland – Remote 🇨🇿 Czechia – Remote 🇷🇴 Romania – Remote 🇬🇪 Georgia – Remote 🇲🇪 Montenegro – Remote 🇪🇸 Spain – Remote

⏰ Full Time

🟠 Senior

📚 Research Engineer

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

TuxCare

WebsiteLinkedInAll Job Openings

51 - 200 employees

🔒 Cybersecurity

☁️ SaaS

🤝 B2B

Cybersecurity • SaaS • B2B

TuxCare is a cybersecurity company that provides enterprise-grade open source supply chain security, long-term lifecycle support, and non-disruptive patching for Linux and language ecosystems. Its products include SecureChain (rebuilt, malware-scanned, continuously patched open-source packages), KernelCare (rebootless kernel patching), LibCare (rebootless patching for OpenSSL and glibc), and Endless Lifecycle Support (ELS) for operating systems, runtimes, and language ecosystems. TuxCare also offers enterprise support for community Linux distributions, custom kernel development, compliance-focused tooling (SBOM, VEX, SLSA attestations), and solutions aimed at healthcare, finance, government, and other regulated sectors.

📋 Description

• Own SecureChain's malicious-code detector, including alert review and classification, test corpus, quality benchmarks, false-positive and coverage metrics • Extend detection with artifact scanning, static signals, dynamic analysis and external intelligence • Build repeatable pipelines to discover high and critical vulnerabilities in supported open-source software, including end-of-life versions • Reproduce findings, prove impact and reachability, and store repeatable evidence • Develop AI-assisted methods to generate and test candidate fixes for patch automation • Own TuxCare CNA work, including CVE assignment, record quality and coordinated disclosure with upstream projects • Prepare technical write-ups and research publications with Marketing • Take over detector, sample review and CNA responsibilities during the first 30 days • Improve detector workflows and begin a vulnerability-discovery pilot during days 31–60 • Expand discovery, complete coordinated disclosure where applicable, and publish the first research output during days 61–90

🎯 Requirements

• Security research background in malware or software supply-chain research, vulnerability discovery and root-cause analysis • Strong Python or another suitable systems language • Experience building production tools and pipelines • Experience with CI pipelines, test automation and operating services • Practical use of static analysis, fuzzing and sandboxing • Heavy, daily use of AI-assisted tools in research and engineering • Experience with more than one package ecosystem, such as PyPI, npm, Maven, Go or Linux distributions • Clear research reports and experience with coordinated disclosure • Advanced written and spoken English • Published CVEs, advisories or security research (nice-to-have) • Experience with CNA operations or vulnerability databases such as CVE or OSV (nice-to-have)

🏖️ Benefits

• A focus on professional development • Interesting and challenging projects • Fully remote work with flexible working hours, allowing you to schedule your day and work from any location worldwide • Paid 24 days of vacation per year • 10 days of national holidays • Unlimited sick leaves • Compensation for private medical insurance • Co-working reimbursement • Gym/sports reimbursement • Budget for education • Opportunity to receive a reward for the most innovative idea that the company can patent

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume