Vulnerability Detection Engineer

🕒 vor 11 Tagen

🇺🇸 Vereinigte Staaten – Remote

⏰ Vollzeit

🟡 Mittelstufe

🟠 Senior

👷🏻‍♀️ Ingenieur

👻 Geisterscore 12%

Was es bedeutet: die Wahrscheinlichkeit, dass für diese Stelle niemand wirklich einstellt.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Warum dieser Wert:

• Seit 11 Tagen offen.
• Kein Gehalt angegeben.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

Beazley Security

WebsiteLinkedInAlle Stellen

51 - 200 Mitarbeiter

Gegründet 2016

🔒 Cybersecurity

💼 Beratung

🤝 B2B

Cybersecurity • Consulting • B2B

Beazley Security ist ein Anbieter von Cybersecurity-Services und Incident Response aus dem Umfeld der Beazley-Gruppe. Das Unternehmen bietet B2B-Sicherheitslösungen wie Incident Reporting und Response, Managed XDR, Exposure- und Third-Party-Risk-Management, Dark-Web-Monitoring, Offensive und technische Security, Cloud- und Microsoft-Security, Krisensimulationen und Tabletop Exercises, Advisory Services sowie Forschung über die Beazley Security Labs. Beazley Security stellt Managed Services und Consulting für Unternehmenskunden bereit und betreibt kundenorientierte Tools wie das VERACIS-Portal.

Beschreibung

• Conduct vulnerability research on internet exposed services and software, working with the BSL research team to determine what a vulnerable instance looks like in collected scan data • Monitor vendor advisories and vulnerability disclosures, and help determine which vulnerabilities warrant detection coverage based on exploitability and exposure across the client base • Analyze proof of concept exploits in lab environments to identify version strings, response behaviors, service fingerprints, and configuration artifacts distinguishing vulnerable systems and services • Author, test, and maintain vulnerability detection logic against Exposure Management scan data, and own detection lifecycles • Develop and maintain scan configurations, including service fingerprinting, targeted protocol probes, and response parsing • Validate software detections across client asset data and be accountable for false positive and false negative rates • Build and improve internal tooling and automation for vulnerability monitoring, detection authoring, and regression testing • Collaborate on technical write-ups, advisories, remediation guidance, intelligence reporting, and published research • Partner with internal departments to convert frontline intrusion findings into proactive detection coverage within Exposure Management • Apply agentic AI to improve processes for analyzing vulnerabilities, discovering affected software, validating vulnerable status, and producing advisory content

🎯 Anforderungen

• Proficiency writing analytical SQL, including joins, aggregations, and regular expression matching, with the ability to reason about query correctness and performance against large datasets • Working proficiency in Python for data manipulation, parsing, tooling, and automation • Proficiency designing and applying agentic AI workflows and AI harnesses to detection research and engineering, including building reusable skills, automating research and validation, and operationalizing detection deployments at scale • Experience with Git, code review, and testing practices in a detection engineering environment • Strong grasp of networking fundamentals, HTTP, TLS, and web application architecture, sufficient to interpret raw service responses and understand how to fingerprint software • Practical understanding of common vulnerabilities and how they are exploited, including authentication bypass, remote code execution, injection flaws, deserialization attacks, and path traversal • Ability to read a vendor advisory or public proof of concept code and independently determine what evidence would confirm a vulnerable instance • Demonstrated ability to work carefully with ambiguous or incomplete data • Experience writing detection, alerting, or analytic logic against large-scale telemetry or scan data in a data warehouse environment • Experience with data quality work identifying gaps, inconsistencies, or drift in upstream collection • Familiarity with detection and scanning frameworks such as Nuclei or Nmap NSE, and an understanding of how their scanning logic works • Experience collaborating in a code repository and using AI assisted coding tools • Exposure to vulnerability prioritization frameworks including CISA KEV, EPSS, CVSS, and CWE • Experience building isolated lab environments with Docker or virtual machines to reproduce vulnerable software • Experience with patch diffing, binary analysis, or reverse engineering • Published CVEs, bug bounty findings, open-source security tooling contributions

🏖️ Vorteile

• Competitive salary and bonus • Flexible working arrangements • Generous leave policies including 3 months paid parental • 100% of employee-only insurance premiums covered (healthcare, dental and vision) • Up to 5% matched 401k contribution • Opportunities for career advancement and ongoing training • Participation in industry conferences and events

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen