Senior Detection Engineer, AppSec & Threat Hunting

Invicti Security; United States; Teletrabalho; USD 120 000 - 210 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health benefits

Remote-friendly

Wellness days

Resumo da oferta

Invicti Security is seeking a hands-on offensive security researcher to build and maintain detection content for our platform. You will craft detection rules (OpenGrep) to catch novel malware patterns and translate vulnerability research into production-ready detections.

You’ll extend language support in the analysis pipeline and triage results across teams. The role involves collaboration with engineering, product, AI/ML, and infrastructure teams, and staying current on AppSec trends, malware

Qualificações

• 5+ years of offensive security or app security research required.
• Strong JS (and Python a plus) programming knowledge.
• Experience with detection writing for DAST scanners, fuzzers, or comparable systems.
• Hands-on web app pentesting covering the OWASP Top 10.
• Ability to communicate complex security concepts clearly to diverse audiences.
• Familiarity with CI/CD, cloud, and DevOps pipelines is a plus.
• OpenGrep or Semgrep experience is a bonus.
• YARA experience is a bonus.

Responsabilidades

• Build and maintain security checks and detection content for the Invicti platform.
• Create new detection rules (OpenGrep) for malware and patterns.
• Research vulnerability classes, exploitation techniques, and translate into detections.
• Extend support for new programming languages across the analysis pipeline.
• Triage pipeline outputs and validate findings.
• Collaborate across engineering, product, AI/ML, and infrastructure teams.

Conhecimentos

Offensive security

Application security research

JavaScript

Python

Web pentesting

OWASP Top 10

Detection rules writing

English fluency

Formação académica

Bachelor's degree or equivalent

Ferramentas

Burp Suite

sqlmap

nmap

ffuf

OpenGrep

Semgrep

YARA

Descrição da oferta de emprego

Invicti Security is seeking a hands-on offensive security researcher to build and maintain detection content for our platform. You will craft detection rules (OpenGrep) to catch novel malware patterns and translate vulnerability research into production-ready detections.

You’ll extend language support in the analysis pipeline and triage results across teams. The role involves collaboration with engineering, product, AI/ML, and infrastructure teams, and staying current on AppSec trends, malware