Senior Offensive Security Researcher – Remote Europe

Invicti Security; Austin (TX); Remote; USD 101,000 - 146,000; Full time

Benefits offered by this job

Remote work options

Wellness days

Volunteer time off

Birthday leave

Employee recognition

Job summary

Invicti Security is seeking a hands-on offensive security researcher who turns vulnerability and malware knowledge into detection content that ships. You own security checks, write clean, accurate detection rules, and prioritize quality with low false positives.

You will lead research efforts, mentor others, and collaborate across engineering, product, and AI/ML teams to ensure detections ship and stay effective. Fluency in English is essential.

Qualifications

• 8+ years of offensive security or application security research experience.
• Broad knowledge of programming languages such as JavaScript and Python.
• Deep understanding of vulnerability classifications and exploitation methodologies.
• Experience with detection writing for security tooling and true false-positive management.
• Experience building testing frameworks or evaluation harnesses for security tooling.
• Strong web app pentesting experience covering OWASP Top 10 and modern API surfaces.

Responsibilities

• Create detection rules (OpenGrep) to catch malware and vulnerabilities.
• Extend support for new programming languages in the analysis pipeline.
• Research new attack vectors and translate findings into production detections.
• Collaborate with engineering, product, and AI/ML teams to ship research.
• Publish blog posts and contribute to CVEs, advisories, and talks.

Skills

JavaScript

Python

Security principles

Vulnerability classifications

Detection writing

OWASP Top 10

API security

English fluency

Education

Bachelor's degree or higher

Tools

Burp Suite

sqlmap

nmap

ffuf

OpenGrep

Semgrep

Kubernetes

Job description

Invicti Security is seeking a hands-on offensive security researcher who turns vulnerability and malware knowledge into detection content that ships. You own security checks, write clean, accurate detection rules, and prioritize quality with low false positives.

You will lead research efforts, mentor others, and collaborate across engineering, product, and AI/ML teams to ensure detections ship and stay effective. Fluency in English is essential.