Vulnerability Detection Engineer

🔥 5 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Beazley Security

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2016

🔒 Cybersecurity

💼 Consulting

🤝 B2B

Cybersecurity • Consulting • B2B

Beazley Security is a cybersecurity services and incident-response provider associated with the Beazley group. The company offers B2B security solutions including incident reporting/response, Managed XDR, exposure and third‑party risk management, dark web monitoring, offensive and technical security, cloud and Microsoft security, crisis simulations/tabletops, advisory services, and research via Beazley Security Labs. They provide managed services and consulting to enterprise clients and operate client-facing tooling such as the VERACIS portal.

📋 Description

• Conduct vulnerability research on internet exposed services and software, working with the BSL research team to determine what a vulnerable instance looks like in collected scan data • Monitor vendor advisories and vulnerability disclosures, and help determine which vulnerabilities warrant detection coverage based on exploitability and exposure across the client base • Analyze proof of concept exploits in lab environments to identify version strings, response behaviors, service fingerprints, and configuration artifacts distinguishing vulnerable systems and services • Author, test, and maintain vulnerability detection logic against Exposure Management scan data, and own detection lifecycles • Develop and maintain scan configurations, including service fingerprinting, targeted protocol probes, and response parsing • Validate software detections across client asset data and be accountable for false positive and false negative rates • Build and improve internal tooling and automation for vulnerability monitoring, detection authoring, and regression testing • Collaborate on technical write-ups, advisories, remediation guidance, intelligence reporting, and published research • Partner with internal departments to convert frontline intrusion findings into proactive detection coverage within Exposure Management • Apply agentic AI to improve processes for analyzing vulnerabilities, discovering affected software, validating vulnerable status, and producing advisory content

🎯 Requirements

• Proficiency writing analytical SQL, including joins, aggregations, and regular expression matching, with the ability to reason about query correctness and performance against large datasets • Working proficiency in Python for data manipulation, parsing, tooling, and automation • Proficiency designing and applying agentic AI workflows and AI harnesses to detection research and engineering, including building reusable skills, automating research and validation, and operationalizing detection deployments at scale • Experience with Git, code review, and testing practices in a detection engineering environment • Strong grasp of networking fundamentals, HTTP, TLS, and web application architecture, sufficient to interpret raw service responses and understand how to fingerprint software • Practical understanding of common vulnerabilities and how they are exploited, including authentication bypass, remote code execution, injection flaws, deserialization attacks, and path traversal • Ability to read a vendor advisory or public proof of concept code and independently determine what evidence would confirm a vulnerable instance • Demonstrated ability to work carefully with ambiguous or incomplete data • Experience writing detection, alerting, or analytic logic against large-scale telemetry or scan data in a data warehouse environment • Experience with data quality work identifying gaps, inconsistencies, or drift in upstream collection • Familiarity with detection and scanning frameworks such as Nuclei or Nmap NSE, and an understanding of how their scanning logic works • Experience collaborating in a code repository and using AI assisted coding tools • Exposure to vulnerability prioritization frameworks including CISA KEV, EPSS, CVSS, and CWE • Experience building isolated lab environments with Docker or virtual machines to reproduce vulnerable software • Experience with patch diffing, binary analysis, or reverse engineering • Published CVEs, bug bounty findings, open-source security tooling contributions

🏖️ Benefits

• Competitive salary and bonus • Flexible working arrangements • Generous leave policies including 3 months paid parental • 100% of employee-only insurance premiums covered (healthcare, dental and vision) • Up to 5% matched 401k contribution • Opportunities for career advancement and ongoing training • Participation in industry conferences and events

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume