Remote Senior Offensive Security & Detection Engineer

Invicti; Netherlands; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Remote working

Thrive-Wellness Days

Volunteer time off

Paid birthday off

Employee recognition

Job summary

Invicti is seeking a hands-on offensive security researcher to craft detection content for our platform. You will write accurate detection rules, extend OpenGrep-based rules, and translate vulnerability research into production-ready detections.

You'll explore vulnerability classes, modern attack patterns, and AI security topics, collaborating with engineering, product, and AI/ML teams to ship robust detection capabilities across a cloud-native CI/CD pipeline.

Qualifications

• 5+ years of offensive security or application security research.
• Broad knowledge of programming languages — JavaScript is a must, Python is a huge plus.
• Strong understanding of vulnerability classifications, exploitation techniques, and common software weakness taxonomies.
• Working knowledge of detection writing for DAST scanners, fuzzers, or comparable systems.
• Hands-on web application pentesting experience covering the OWASP Top 10 and adjacent classes.

Responsibilities

• Build and maintain security checks and detection content for the Invicti platform with focus on accuracy and low false positives.
• Create new detection rules (OpenGrep/ Semgrep) to catch malware and vulnerability patterns.
• Research vulnerability classes, exploitation techniques, and translate findings into production detections.
• Extend support for new programming languages across the analysis pipeline.
• Triage pipeline outputs and validate findings.
• Collaborate with engineering and product teams to ship detection content and improve benchmarks.

Skills

Offensive security

Application security

OpenGrep

JavaScript

Python

OWASP Top 10

Web pentesting

English fluency

Tools

Burp Suite

sqlmap

nmap

ffuf

Semgrep

OpenGrep

YARA

Job description

Invicti is seeking a hands-on offensive security researcher to craft detection content for our platform. You will write accurate detection rules, extend OpenGrep-based rules, and translate vulnerability research into production-ready detections.

You'll explore vulnerability classes, modern attack patterns, and AI security topics, collaborating with engineering, product, and AI/ML teams to ship robust detection capabilities across a cloud-native CI/CD pipeline.