Security Researcher - Bot Detection Adversarial Research

Bright Data; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Bright Data ищет исследователя по безопасности для имитации продвинутых противников наших продуктов по сбору данных. Вы получите глубокие знания в веб-безопасности, будете разрабатывать новые методы сбора данных с использованием машинного обучения и помогать масштабировать платформу Bright Data.

Основные задачи включают анализ и обход анти-бот систем, влияние на формируемые проекты и возможность напрямую предлагать идеи руководству. Работа полностью удаленная для кандидатов вне зоны SF.

Qualifications

• Не менее 5 лет опыта в R&D как разработчик/исследователь/тестировщик
• Глубокие знания HTTP и TLS протоколов
• Опыт работы как минимум с двумя из перечисленных технологий

Responsibilities

• Прототипирование и взлом анти-бот систем, упор на современные техники fingerprinting.
• Разработка HTTP клиента для обеспечения сбора данных Bright Data.
• Идентификация новых стандартов и технологий, влияющих на сбор данных.
• Обратная разработка решений противодействия ли задача через анализ вредоносного ПО и обфускации.

Skills

HTTP/TLS протоколы

JavaScript/TypeScript/Python/C++

Офиц. безопасность / пентестинг

Reverse engineering / malware analysis

Anti-bot / веб-безопасность

Security research

Job description

Описание: Description As a Security Researcher you will focus on simulating our most advanced adversaries against our data collection products affecting thousands of customers. You will acquire significant knowledge of the web application security field, building new machine learning data collection methods and helping to scale the Bright Data collection platform to new levels as our customer base continues to grow.

Задачи

You'll be reversing some of the best anti-bot systems on the planet - it doesn't get more cutting-edge than this. You'll have a real say in the projects you're part of - this isn't a "just execute" kind of role. You can actively shape the way this team works - it's still being built, and your fingerprints will be on it. Got an idea? You can take it straight to the COO - no red tape, no politics. The people make it - SecRes and Bright Data are genuinely great teams to be part of. Fully remote position for candidates outside of SF area

Conducting in-depth research on tools or services that prevent the free collection of public web data.

Building and improving HTTP client solutions to guarantee the success of Bright's Data collection efforts.

Identifying new standards and technologies that could impact our data collection capabilities.

Reverse engineering adversary solutions to prevent fingerprinting solutions from stopping us. There’s much more…

Требования

5 years’ experience as an R&D developer / researcher / tester A deep understanding of HTTP & TLS protocols Experience with at least 2 of the following:

• Programming experience in JavaScript /TypeScript / Python / C++
• Penetration testing experience or offensive security certificates (OSCP, OSEP etc.)
• Professional security research experience (such as web vulnerabilities, mobiles apps etc.)
• Reverse engineering skills (JS deobfuscation or binaries reversing) / malware analysis
• Anti-bot development or other similar products, such as WAF, Anti-Virus development (malware emulation etc.), DDoS prevention etc.
• Experience working at an anti-bot or web security company – a major advantage