Senior Security Research Engineer - Remote, Flexible Hours

TuxCare Inc.; Województwo mazowieckie; Remote; PLN 140,000 - 210,000; Full time

Benefits offered by this job

Fully remote work

Paid vacation 24 days

Private medical insurance

Co-working & gym reimbursement

Education budget

Patent reward program

Flexible working hours

Job summary

TuxCare is seeking a Senior / Principal Security Research Engineer to start the Security Research & Automation function of SecureChain. You will lead as the first engineer, building production-grade tools and pipelines to scale research in a fully remote role.

You will own SecureChain's detectors, extend them with analytics, reproduce findings with evidence, and publish research after coordinated disclosure. English required; AI-assisted tooling central to workflows.

Qualifications

• Security research background in malware or software supply-chain.
• Strong Python or other systems language; build production tools.
• CI pipelines, test automation and operating services.
• Familiar with static analysis, fuzzing and sandboxing.
• Experience with multiple package ecosystems (PyPI, npm, Maven, Go).

Responsibilities

• Own SecureChain's malicious-code detector and its review workflow.
• Extend detection with artifact scanning, static signals and external intelligence.
• Build repeatable pipelines to discover new high/critical vulnerabilities.
• Reproduce findings with evidence and enable coordinated disclosure.
• Develop AI-assisted methods to generate and test fixes.
• Coordinate CNA work and CVE assignments with upstream projects.
• Prepare technical write-ups and publications with Marketing.

Skills

Python

CI pipelines

Static analysis

Fuzzing

Sandboxing

AI-assisted tooling

Multiple ecosystems

English proficiency

Job description

TuxCare is seeking a Senior / Principal Security Research Engineer to start the Security Research & Automation function of SecureChain. You will lead as the first engineer, building production-grade tools and pipelines to scale research in a fully remote role.

You will own SecureChain's detectors, extend them with analytics, reproduce findings with evidence, and publish research after coordinated disclosure. English required; AI-assisted tooling central to workflows.