Principal Security Researcher

ITCO Solutions; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

A leading company in cybersecurity solutions is seeking a specialist to focus on fuzzing and security testing. The role involves developing detection methods for cyber attacks, researching attack vectors, and collaborating with various teams to enhance security measures. Ideal candidates will have strong experience in fuzzing techniques and container security.

Qualifications

• Experience with security testing using fuzzing techniques.
• Proficient with tools like AFL++, libFuzzer, Honggfuzz, and Sulley.
• Ability to debug crashes in x86 and ARM environments.

Responsibilities

• Invent and develop client detection methods for cyber attacks.
• Lead research on emerging attack vectors and techniques.
• Collaborate with threat hunters and red team members.

Skills

Fuzzing

Kubernetes (K8s)

Debugging

Container security

Machine learning

Tools

AFL++

libFuzzer

Honggfuzz

Sulley

Job description

100% Remote

Must have experience with Fuzzing and Kubernetes (K8s).

Qualifications

• Experience with security testing using Fuzzing techniques.
• Ability to determine when to use Mutation-based, Coverage-based, and Grammar-based fuzzing.
• Proficient with tools such as AFL++, libFuzzer, Honggfuzz, Sulley.
• Capability to develop custom test harnesses for testing specific APIs or entry points at scale.
• Ability to debug crashes and identify root causes within x86 and ARM environments.
• Potential to create exploits based on crashes.
• Understanding of binary layouts and memory safety vulnerabilities.
• Proficient with container security escapes and hardening efforts.

Responsibilities

• Invent and develop client detection methods for identifying cyber attacks.
• Lead in-depth research on emerging attack vectors, tactics, and techniques used by advanced threat actors.
• Familiarity with graph analytics applied to the cyber domain.
• Leverage machine learning, statistical analysis, and other analytics to uncover stealthy and sophisticated threats.
• Collaborate with threat hunters, red team, and blue team members on attack detection.

E-Verify Notice

United States Employment Opportunities Only. E-Verify is an internet-based system operated by the Department of Homeland Security and the Social Security Administration that confirms an individual’s employment eligibility in the U.S. This role complies with E-Verify requirements for federal contractors and subcontractors.

This message may contain confidential and privileged information. Unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender and delete all copies of this message.