Senior Vulnerability Researcher (Pentesting)

Bitsight; Portugal; Presencial; EUR 70 000 - 120 000; Tempo integral

Resumo da oferta

A cyber risk management leader in Portugal is seeking a Vulnerability Researcher. In this role, you will research emerging threats, develop innovative vulnerability detection techniques, and provide technical leadership to junior researchers. The ideal candidate will hold a Bachelor's in Computer Science with experience in vulnerability research and penetration testing. Strong communication skills and the ability to solve complex problems are essential. This position offers an opportunity to work in an international team dedicated to enhancing security across digital supply chains.

Qualificações

• Experience in leading technical projects and mentoring junior team members.
• In-depth knowledge of tactics, techniques, and procedures used by threat actors.
• Proven track record of innovation in vulnerability research.
• Proven track record of innovation in vulnerability research.
• Experience in leading technical projects and mentoring junior team members.
• Broad knowledge of information security principles and network protocols.
• Experience in network-based vulnerability detection capability development.
• Experience in source code analysis.
• Familiarity with software reverse engineering and patch diffing.
• Strong communication and interpersonal skills.
• Strong analytical and problem solving skills and a track record of solving ambiguous problems.

Responsabilidades

• Research and analyze emerging threats and new high-profile vulnerabilities.
• Conduct assessments of vulnerabilities for remote detection methods.
• Drive innovation by developing new tools and techniques.
• Develop plugins, tools, and techniques to implement vulnerability detection and product fingerprinting capabilities.
• Drive innovation by researching and developing new tools and techniques.
• Provide technical leadership on research projects, mentor junior researchers and update stakeholders.
• Identify opportunities for automation and process improvement within Bitsight workflows.
• Communicate techniques and associated risk to senior leadership.

Conhecimentos

Vulnerability research

Penetration testing

Exploit development

Software reverse engineering

Problem solving

Project leadership

Mentoring

Information security basics

Network-based detection

Source code analysis

Reverse engineering

Patch diffing

Communication skills

Analytical thinking

Problem solving

Ambiguity handling

Formação académica

Bachelor's degree in Computer Science

Master's degree preferred

Descrição da oferta de emprego

Overview

Bitsight is a cyber risk management leader transforming how companies manage exposure, performance, and risk for themselves and their third parties. Companies rely on Bitsight to prioritize their cybersecurity investments, build greater trust within their ecosystem, and reduce their chances of financial loss.

Built on over a decade of technological innovation, its integrated solutions deliver value across enterprise security performance, digital supply chains, cyber insurance, and data analysis.

The Vulnerability Research team within Bitsight’s Security Research department develops and deploys techniques to remotely detect the presence of recently disclosed vulnerabilities. These techniques are integrated into the company’s Internet scanning infrastructure which enables Bitsight to measure the rate at which organizations patch and remediate vulnerabilities. This function is a critical input into Bitsight’s capability to assess the effectiveness of organizational security programs as well as the ability to identify third party vulnerability exposures in organizations’ digital supply chains. The team also enables a unique form of “vulnerability epidemiology” research in tracking the scale, impact, and organizational response for high-profile vulnerabilities. This role will work alongside an international team of vulnerability researchers in the research and development of new vulnerability detection and inference tools and techniques as well as the integration and operationalization of those techniques within Bitsight’s telemetry collection infrastructure.

Objectives & Responsibilities

• Research and analyze emerging threats as well as newly published, high-profile vulnerabilities and contribute to the development of vulnerability intelligence tooling
• Conduct in-depth assessments of vulnerabilities to assess viability of remote, network-based detection methods
• Reverse engineer software and software patches to identify new detection methods
• Develop plugins, tools, and techniques to implement newly researched vulnerability detection and product fingerprinting capabilities
• Drive innovation by researching and developing new tools and techniques
• Provide technical leadership on research projects to include mentoring junior researchers and providing regular updates to stakeholders
• Identify opportunities for automation and process improvement within Bitsight workflows
• Develop vulnerability detection techniques, and communicate potential techniques, and the associated risk, with senior leadership

Qualifications

• Bachelors degree in Computer Science or related field; Master’s degree preferred
• Experience in vulnerability research, penetration testing, and exploit development
• In depth knowledge of tactics, techniques, and procedures commonly used by threat actors
• Proven track record of innovation in the field of vulnerability research
• Experience in leading technical projects and mentoring junior team members
• Broad knowledge of information security principles and network protocols
• Experience in network-based vulnerability detection capability development
• Experience in source code analysis
• Familiarity software reverse engineering and patch diffing
• Strong communication and interpersonal skills
• Strong analytical and problem solving skills and a track record of solving ambiguous problems