Security Researcher - Bot Detection Adversarial Research R&D & Technical

Bright Data Ltd.; San Francisco (CA); Hybrid; USD 140,000 - 200,000; Full time

Job summary

Bright Data is seeking a Security Researcher to simulate our most advanced adversaries against our data collection products, driving security and reliability for thousands of customers. You will focus on HTTP/TLS security, build ML-assisted data collection methods, and help scale the Bright Data platform.

This hybrid role offers remote work for candidates outside the SF area and a chance to shape an early-stage security team.

Qualifications

• 5 years’ experience as an R&D developer / researcher / tester.
• A deep understanding of HTTP & TLS protocols.
• Experience with at least 2 of the following: OSCP/OSEP certs; professional security research; reverse engineering / malware analysis; anti-bot development.

Responsibilities

• Conducting in-depth research on tools or services that prevent the free collection of public web data.
• Building and improving HTTP client solutions to guarantee the success of Bright's Data collection efforts.
• Identifying new standards and technologies that could impact our data collection capabilities.
• Reverse engineering adversary solutions to prevent fingerprinting solutions from stopping us.
• There’s much more…

Skills

HTTP & TLS protocols

Security research

Reverse engineering

Job description

Security Researcher - Bot Detection Adversarial Research

, (Hybrid)

Description

As a Security Researcher you will focus on simulating our most advanced adversaries against our data collection products affecting thousands of customers.

You will acquire significant knowledge of the web application security field, building new machine learning data collection methods and helping to scale the Bright Data collection platform to new levels as our customer base continues to grow.

Why You'll Love It:

• You’ll be reversing some of the best anti-bot systems on the planet - it doesn't get more cutting-edge than this.
• You’ll have a real say in the projects you're part of - this isn't a "just execute" kind of role.
• You can actively shape the way this team works - it's still being built, and your fingerprints will be on it.
• Got an idea? You can take it straight to the COO - no red tape, no politics.
• The people make it - SecRes and Bright Data are genuinely great teams to be part of.

*Fully remote position for candidates outside of SF area

Responsibilities

• Conducting in-depth research on tools or services that prevent the free collection of public web data.
• Building and improving HTTP client solutions to guarantee the success of Bright's Data collection efforts.
• Identifying new standards and technologies that could impact our data collection capabilities.
• Reverse engineering adversary solutions to prevent fingerprinting solutions from stopping us.
• There’s much more…

Requirements

• 5 years’ experience as an R&D developer / researcher / tester
• A deep understanding of HTTP & TLS protocols
• Experience with at least 2 of the following:

• -Penetration testing experience or offensive security certificates (OSCP, OSEP etc.)
• -Professional security research experience (such as web vulnerabilities, mobiles apps etc.)
• -Reverse engineering skills (JS deobfuscation or binaries reversing) / malware analysis
• -Anti-bot development or other similar products, such asWAF, Anti-Virus development (malware emulation etc.), DDoS prevention etc.

• Experience working at an anti-bot or web security company – a major advantage