Remote Senior Security Research Engineer - OSS Supply Chain

TuxCare Inc.; Warszawa; Remote; PLN 200,000 - 260,000; Full time

Benefits offered by this job

Fully remote

Flexible hours

Paid vacation 24 days

National holidays 10 days

Unlimited sick leave

Private medical insurance

Co-working stipend

Gym reimbursement

Budget for education

Innovation reward

Job summary

TuxCare is hiring a Senior/Principal Security Research Engineer to initiate the SecureChain security research and automation function. You will lead as the first engineer, building production-grade tools and pipelines to scale research, with a plan to grow to a small team.

You’ll own SecureChain’s malware detector, extend detection with analysis, and drive coordinated disclosure. This fully remote role offers flexible hours and strong growth opportunities.

Qualifications

• Security research background in malware or software supply-chain research.
• Strong Python or other systems language; build production tools.
• CI pipelines, test automation and operating services.
• Static analysis, fuzzing and sandboxing experience.
• Frequent use of AI-assisted tools in research and engineering.
• Experience with multiple package ecosystems (PyPI, npm, Maven, Go, Linux distros).
• Clear research reports and experience with coordinated disclosure.
• Advanced written and spoken English.

Responsibilities

• Own SecureChain's malicious-code detector and metrics.
• Extend detection with artifact scanning and external intelligence.
• Build repeatable pipelines to discover new vulnerabilities.
• Reproduce findings and store evidence for repeatability.
• Develop AI-assisted methods to generate and test fixes.
• Own CNA work: CVE assignment and coordinated disclosure.
• Prepare technical write-ups and publications with Marketing.

Skills

Security research

Python

CI pipelines

Static analysis

Fuzzing

Sandboxing

AI-assisted tools

Package ecosystems

Coordinated disclosure

English proficiency

Job description

TuxCare is hiring a Senior/Principal Security Research Engineer to initiate the SecureChain security research and automation function. You will lead as the first engineer, building production-grade tools and pipelines to scale research, with a plan to grow to a small team.

You’ll own SecureChain’s malware detector, extend detection with analysis, and drive coordinated disclosure. This fully remote role offers flexible hours and strong growth opportunities.