Offensive Security Researcher — Detection & Threat Research

Invicti Security; United States; À distance; USD 140 000 - 190 000; Plein temps

Avantages offerts par ce poste

Remote work

Thrive-Wellness Days

Volunteer Time Off

Paid Birthday Off

Total Rewards

Résumé du poste

Invicti Security is seeking a hands-on offensive security researcher to develop detection content, write clean rules, and drive research that scales across web app security. You’ll lead projects, mentor peers, and translate research into production-ready capabilities for customers worldwide.

Ideal candidates have 8+ years of experience, strong JavaScript skills, and a background in vulnerability research, abuse vectors, and secure software practices. Remote-friendly with global teams.

Qualifications

• 8+ years of offensive security or application security research experience.
• Strong knowledge of programming languages (JavaScript essential; Python a plus).
• Deep understanding of vulnerability classifications, exploitation methods, and secure SDLC.
• Experience designing testing frameworks, evaluation harnesses, or large-scale validation systems.
• Fluent English with excellent written and verbal communication.

Responsabilités

• Create new detection rules (OpenGrep) to catch novel malware patterns and boost accuracy.
• Extend support for new programming languages across the analysis pipeline.
• Research novel vulnerability classes and translate findings into production-ready detections.
• Mentor junior researchers on detection writing and exploitation techniques.
• Collaborate with cross-functional teams to ship research outputs and improve security automation.

Connaissances

Offensive security research

English communication

Formation

Bachelor's degree in a related field

Outils

Burp Suite

sqlmap

nmap

ffuf

Semgrep/OpenGrep

YARA

Kubernetes

Description du poste

Invicti Security is seeking a hands-on offensive security researcher to develop detection content, write clean rules, and drive research that scales across web app security. You’ll lead projects, mentor peers, and translate research into production-ready capabilities for customers worldwide.

Ideal candidates have 8+ years of experience, strong JavaScript skills, and a background in vulnerability research, abuse vectors, and secure software practices. Remote-friendly with global teams.