Overview

Are you fascinated by the intricate world of cyber threats and passionate about defending the digital frontier? We're on the hunt for a brilliant Senior Security Researcher to join our pioneering team. At [Company Name], we're revolutionizing how organizations secure their software supply chains, especially in this dynamic era of AI. Forget endless alerts; we zero in on the critical, exploitable risks, helping developers ship secure software faster. If you thrive on dissecting complex attacks, building innovative tools, and making a tangible impact on global security, this is your chance to shine.

At [Company Name], we are at the forefront of Active ASPM, a groundbreaking approach to securing the modern software supply chain amidst the complexities of AI. Our mission is clear: to cut through the noise of countless alerts and pinpoint the truly reachable and exploitable risks, empowering both developers and security teams. From safeguarding AI-generated code to protecting cloud runtimes, we provide the essential visibility and automation needed for rapid, secure software deployment. This is a unique opportunity for a highly skilled and driven Senior Security Researcher to join our dedicated research group. You will play a pivotal role in dissecting sophisticated supply chain attacks, performing in-depth malware analysis, and developing innovative open-source tools. This is a fully remote, worldwide opportunity where your contributions will directly scan and protect users and organizations across the globe from emerging cyber threats, profoundly shaping the future of [Company Name].

Key Responsibilities

Conduct deep analysis into complex supply chain attacks, understanding their vectors, impact, and mitigation strategies.
Perform meticulous dissection and reverse engineering of malware to identify vulnerabilities and threat indicators.
Design, develop, and contribute to open-source tools that enhance security posture and aid in threat detection.
Collaborate with cross-functional engineering, product, and security teams to translate research findings into actionable insights and product features.
Stay ahead of the curve on the latest cyber threats, attack techniques, and industry best practices.
Actively contribute to a culture of security awareness and innovation within the company and the broader security community.

Requirements

Experience: You bring at least 5 years of dedicated experience as a Cybersecurity Researcher, with a strong focus on supply-chain attacks and malware analysis.
Ecosystem Knowledge: You are very familiar with key open-source registry ecosystems such as npm, PyPI, and Maven, and possess a solid understanding of their respective attack surfaces.
Production Software: You have a proven track record of shipping production-grade software, demonstrating your ability to deliver robust solutions.
SDLC & CI/CD: You possess a strong understanding of the Software Development Life Cycle (SDLC) and modern Continuous Integration/Continuous Delivery (CI/CD) pipelines.

What You'll Gain

Impact: Directly influence the security of software supply chains globally, protecting countless organizations and users from critical cyber threats.
Innovation: Work at the cutting edge of Active ASPM, leveraging AI to solve some of the most pressing security challenges of our time.
Growth: Collaborate with a team of brilliant minds, continuously expanding your expertise in a rapidly evolving field.
Influence: Play a vital role in shaping the technological direction and future of a pioneering security company.
Flexibility: Enjoy the freedom and work/life balance that comes with a fully remote, worldwide role.