Senior Offensive Security Researcher

Invicti Security; Austin (TX); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Health insurance

Hybrid work in Austin

401(k) match

Discretionary time off

Job summary

Invicti Security in Austin, TX is seeking a hands-on offensive security researcher who turns vulnerability and malware knowledge into detection content that ships. You will own detection rules, write clean rules, and maintain low false positives while shaping our security checks for customers.

You’ll create OpenGrep-based detections, expand language support, and explore cutting-edge tooling to catch threats at scale. Join a team driving innovation in appsec and AI-driven defenses.

Qualifications

• 8+ years of offensive security or application security research experience.
• Broad knowledge of programming languages (JavaScript; Python a plus).
• Strong understanding of security principles and best practices.
• Deep knowledge of vulnerability classifications and exploitation methodologies.

Responsibilities

• Create and write detection rules for malware and vulnerabilities.
• Extend support for new languages in the analysis pipeline.
• Research novel attack vectors and translate findings into production detections.
• Build attack chain templates and evaluation benchmarks.
• Collaborate across engineering, product, AI/ML, and security teams.
• Mentor junior researchers on detection writing and exploitation techniques.

Skills

OpenGrep

Semgrep

JavaScript

Python

Web security

OWASP Top 10

Burp Suite

nmap

fuzzing

AI/LLM security

Education

Bachelor's or Master's in CS/Engineering

Tools

Burp Suite

sqlmap

nmap

ffuf

OpenGrep

Semgrep

Job description

Invicti Security in Austin, TX is seeking a hands-on offensive security researcher who turns vulnerability and malware knowledge into detection content that ships. You will own detection rules, write clean rules, and maintain low false positives while shaping our security checks for customers.

You’ll create OpenGrep-based detections, expand language support, and explore cutting-edge tooling to catch threats at scale. Join a team driving innovation in appsec and AI-driven defenses.