Principal Security Researcher

🕒 il y a 1 mois

🌐 États-Unis, Canada, +2 autres pays – Distant

infoinfo

💵 $203 200 - $275 000 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 0%

infoinfo

🗣️🇺🇸🇬🇧 Anglais requis

Postuler Maintenant
Trouver des Emplois à Distance Similaires

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Logo of GitLab

GitLab

1001 - 5000 employés

Fondée en 2014

💼 Conseil

📣 Marketing

🤖 Intelligence artificielle

💰 Secondary Market en 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab est une plateforme DevOps complète, proposée sous la forme d’une application unique, qui change en profondeur la manière dont les équipes Développement, Sécurité et Ops collaborent et construisent des logiciels. De l’idée à la production, GitLab aide les équipes à réduire le temps de cycle de plusieurs semaines à quelques minutes, à diminuer les coûts de développement et le time to market, tout en augmentant la productivité des développeurs.

Description

• Conduct and lead security research projects across multiple functional areas • Identify novel, systemic, and chained vulnerabilities in GitLab • Validate security vulnerabilities through hands-on testing and develop proof-of-concept exploits • Assess emerging industry vulnerability classes against the GitLab codebase and drive class-level remediation • Lead security research into GitLab's AI and agentic surfaces and define security requirements • Build and direct tooling and automation for security research, including agent-assisted vulnerability discovery • Research the security posture of open source tools and dependencies integrated with GitLab • Report findings to maintainers and track mitigation under responsible disclosure guidelines • Solve technical problems of the highest scope, complexity, and ambiguity • Help shape the team and sub-department roadmap • Lead integration of security research results into engineering and business functions • Teach, mentor, and advise domain experts and individual contributors • Share knowledge and novel vulnerability types with the security community • Report to the Senior Manager of Application Security

🎯 Exigences

• 10+ years of experience in security research, penetration testing, or offensive security roles • Strong ability in discovering and exploiting vulnerabilities in large codebase and complex systems • Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust • Ability to read and analyze code across multiple languages and codebases • Strong knowledge of AI frameworks • Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation • At ease in establishing and driving complex remediation initiatives involving cross-functional teams • Excellent written communication skills with an ability to articulate complex topics in a clear and concise manner • Ability to translate complex technical findings into clear risk assessments and remediation recommendations • Strong analytical and problem-solving skills with creative thinking about attack scenarios • Nice to Have: Published security research or conference presentations; background in software engineering with distributed systems expertise; experience with GitLab or similar DevSecOps platforms

🏖️ Avantages

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave

Postuler Maintenant

Emplois Similaires

🕒 il y a 1 mois

Samsara

1001 - 5000

📦 Logistique

🏗️ Construction

🏥 Santé

Staff Offensive Security Engineer leading vulnerability management for Samsara's Connected Operations Cloud. Automating security across cloud, firmware, IoT, and corporate systems.

🇺🇸 États-Unis – Télétravail

💵 $165 200 - $265 500 / an

💰 Seed Round en 2014-08

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

infoinfo

🗣️🇺🇸🇬🇧 Anglais requis

🕒 il y a 1 mois

Samsara

1001 - 5000

📦 Logistique

🏗️ Construction

🏥 Santé

Staff Offensive Security Engineer leading vulnerability management and application security for Samsara’s Connected Operations Cloud. Building automation across cloud, firmware, IoT, and corporate systems.

🇺🇸 États-Unis – Télétravail

💵 £138 800 - £173 500 / an

💰 Seed Round en 2014-08

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

infoinfo

🗣️🇺🇸🇬🇧 Anglais requis

🕒 il y a 1 mois

Zero Hash

51 - 200

💳 Fintech

₿ Crypto

🌐 Web 3

Security Architect securing zerohash’s crypto and stablecoin infrastructure platform. Designing cloud, blockchain, and application security across global financial services systems.

🇺🇸 États-Unis – Télétravail

💰 €105 000 000 Series D en 2022-01

⏰ Temps Plein

🟠 Senior

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

infoinfo

🗣️🇺🇸🇬🇧 Anglais requis

AWS

Cloud

Cyber Security

Kubernetes

SDLC

Web3

🕒 il y a 1 mois

Optiv

1001 - 5000

Security engineering director leading SIEM, EDR, SOAR, and MDR platforms for Optiv’s managed security services. Directing practice strategy, service quality, automation, staffing, and client escalations.

🗣️🇺🇸🇬🇧 Anglais requis

🕒 il y a 1 mois

AHEAD

1001 - 5000

💼 Conseil

🤖 Intelligence artificielle

🏢 Entreprise

Principal Technical Consultant securing cloud platforms and applications for AHEAD, which builds digital business platforms. Leading cloud security, application security, client delivery, and security service development.

🇺🇸 États-Unis – Télétravail

💵 $250 000 - $300 000 / an

💰 €5 697 750 Venture Round - AHEAD en 2024-05

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🗣️🇺🇸🇬🇧 Anglais requis