Cyber Security Researcher

Detectify; Stockholms kommun; Hybrid; SEK 700,000 - 900,000; Full time

Benefits offered by this job

Hybrid work

Stockholm office access

Job summary

Detectify is seeking a Security Researcher to develop proof-of-concepts for novel vulnerability detection methods and to expand Detectify’s engines to identify new classes of issues. You will work on automated detection, reverse engineering, and engaging with customers to understand attack surfaces.

You will join a fast-paced security team in Stockholm, contributing to cutting-edge offensive security research and sharing insights with engineers and stakeholders.

Qualifications

• Experience finding and exploiting live vulnerabilities via bug bounty, CVEs, CTFs, or published research.
• Deep knowledge of web application security and OWASP Top 10 and beyond.

Responsibilities

• Develop proof-of-concepts for novel vulnerability detection techniques.
• Research attack vectors and automation for new vulnerability classes.
• Design AI-powered workflows to uncover new vulnerabilities and 0-days.
• Reverse engineer binaries to understand exploitation paths.
• Review detection code to minimize false positives and ensure accuracy.
• Serve as a security expert for colleagues and customers.

Skills

Bug bounty

CVEs

CTFs

Web security

Python

Go

AI/LLMs

Job description

What we do at Detectify

We’re Detectify, and we’re not your average cybersecurity company. We’re a team obsessed with building cutting-edge tech that actually makes a difference in making the internet a safer place. We’re talking about real-life hackers who know their stuff. You'll learn from the best and join a team that combines human ingenuity with automation to streamline asset discovery and vulnerability assessments.

What you’ll get to do

As a Security Researcher, your main mission is to develop proof-of-concepts for novel ways of detecting vulnerabilities, broadening what Detectify’s engines can find. In other words, your research ends up protecting thousands of real-world attack surfaces.

Other responsibilities include:

• Stay on top of the latest security research, disclosures and techniques, and figure out which ones we can and should turn into scalable detection.

• Research new attack vectors and vulnerability classes that can be automated, and identify where we can source them.

• Design and build agentic workflows that use AI to uncover new vulnerabilities and 0-days.

• Reverse engineer binaries to find vulnerabilities and understand how they can be exploited.

• Review detection code to make sure our tests are accurate and keep false positives to a minimum.

• Act as a go-to security expert for colleagues across the company and help with security-related questions and tasks.

• Talk with customers to understand their attack surfaces and security challenges, and use those insights to shape what we research and build next.

Who you are

• You’re highly versatile and self-motivated, and you can create and drive change. You’re active in the security community and you understand how vulnerabilities work, not just that they exist. You probably also have:

• Hands-on experience finding and exploiting live vulnerabilities, for example through bug bounty programs, CVEs, CTFs, penetration testing or published research.

• Deep knowledge of web application security and common vulnerability classes (OWASP Top 10 and beyond).

• Solid programming or scripting skills (for example Python or Go) and the ability to turn an idea into a working proof-of-concept.

• Curiosity about using LLMs and AI agents in offensive security, or experience building with them already.

• The ability to explain technical findings clearly to engineers, customers and non-security stakeholders.

Bonus points if you:

• Have experience with reverse engineering.

• Have publicly disclosed vulnerabilities, written blog posts or given talks at security conferences.

What’s in it for you?

Hybrid work

This position is for the Stockholm office. We offer hybrid working, with access to our office in central Stockholm and would like to see you at the office at least 3 days per week.

So, what do you think?

We are proud to foster an inclusive workplace free from discrimination. We strongly believe that diversity of experience, perspectives, and background will lead to a better environment for our employees and a better product. This is something we value deeply and we encourage everyone to be a part of changing the way the world thinks about security! Go hack yourself!

Please note that to be eligible for this position, candidates must already possess a valid work visa for Sweden, as we are unable to provide visa sponsorship or relocation assistance.