Senior Offensive Security Researcher

Invicti Security; United States; Hybrid; USD 130,000 - 190,000; Full time

Benefits offered by this job

Health Insurance

401(k) Plan

Hybrid work schedule

Paid Time Off

Volunteer Time Off

Job summary

Invicti Security is seeking an accomplished Offensive Security Researcher to build detection rules, expand analysis pipelines, and drive security research across web apps and APIs. You’ll own detection logic, broaden language support (JavaScript and Python), and shape scalable security content for enterprise customers.

Join a fast-moving team that values practical research, high-quality outputs, and collaboration with engineering, product, and AI/ML groups to deliver production-ready detections

Qualifications

• 8+ years of offensive security or application security research experience.
• Broad knowledge of programming languages - JavaScript is a must, Python is a huge plus.
• Strong understanding of security principles, standards, and best practices.
• Deep understanding of vulnerability classifications, exploitation methodologies, and secure software development practices.
• Experience with detection writing for DAST scanners, fuzzers, or comparable systems.

Responsibilities

• Create new detection rules to catch novel malware and vulnerability patterns.
• Extend support for new programming languages across our analysis pipeline.
• Explore and experiment with cutting-edge tools and techniques to detect threats at scale.
• Research novel ways to exploit and analyze modern web applications and APIs - building proof-of-concept attacks.

Skills

JavaScript

Python

Offensive tooling

Security research

Communication

Collaboration across teams

Education

Bachelor's + 5 years or Master’s + 3 years

Tools

OpenGrep

Semgrep

Job description

Invicti Security is seeking an accomplished Offensive Security Researcher to build detection rules, expand analysis pipelines, and drive security research across web apps and APIs. You’ll own detection logic, broaden language support (JavaScript and Python), and shape scalable security content for enterprise customers.

Join a fast-moving team that values practical research, high-quality outputs, and collaboration with engineering, product, and AI/ML groups to deliver production-ready detections