Vulnerability Detection Engineer

Beazley Group; Northern (KY); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Competitive salary and bonus

Flexible working arrangements

3 months paid parental leave

Health insurance coverage for employee

401k with employer match

Opportunities for career advancement

Conference participation

Job summary

Beazley Security Labs seeks a Vulnerability Detection Engineer to identify critical vulnerabilities, develop robust detection logic, and ship detections to the Exposure Management platform. You will work with threat intelligence, exploit research, and automation to strengthen client defenses.

You will collaborate with research and remediation teams, contribute to advisories, and advance detection coverage across client environments.

Qualifications

• Proficiency in SQL and data analysis for large datasets.
• Python proficiency for tooling and automation.
• Experience with detection engineering and AI workflows.
• Familiarity with vulnerability frameworks and advisories (CVE, KEV, CVSS).

Responsibilities

• Conduct vulnerability research on internet-exposed services and software with the team.
• Analyze vendor advisories to decide detection coverage based on exploitability.
• Examine PoC exploits to identify fingerprints and artifacts for detection.
• Author, test, and maintain vulnerability detection logic and lifecycles.
• Develop and maintain scan configurations and service fingerprinting.
• Validate detections against client data and manage false positives/negatives.
• Build internal tooling to support monitoring, detection authoring, and testing.
• Collaborate on advisories and published research for Beazley Security Labs.
• Partner with internal teams to embed detections in Exposure Management.
• Explore Agentic AI to improve detection research and deployment.

Skills

SQL

Python

Agentic AI

Git

Networking

Vulnerability knowledge

Vendor advisories

Threat intel

Education

Bachelor’s degree in Computer Science or related field

Tools

Nuclei

Nmap NSE

Docker

Virtual machines

Job description

Beazley Security is a global cybersecurity firm committed to helping clients enable advanced cyber defenses that reduce risk with quantifiable results. We’re comprised of top talent from private industry, government, intelligence, and law enforcement who are specialists in threat detection, incident response, digital forensics, offensive security, risk management, and cyber resilience. As a subsidiary of a specialty insurance giant, Beazley Insurance, we’ve been at the forefront of cyber insurance management and breach response activities for business clients in the US, UK, and Europe since 2017. As Beazley Security, the company will have an expanded scope, leveraging nearly two decades of cyber incident experience, a strong services division, and a business strategy focused on growth, to realize our goals and deliver benefits to clients.

As a company, we are committed to upholding our core values of Belonging, Integrity, Service, Accountability, and Curiosity. We believe these values are essential to creating a strong and inclusive workplace culture, as well as to deliver world-class cybersecurity solutions to our clients worldwide. As Beazley Security, these values will continue to thrive, with an extra emphasis on expansion of our capabilities and capacity in helping solve unique client challenges.

About Beazley Security Labs:

Beazley Security Labs (BSL) is responsible for transforming real-world threat activity into actionable intelligence that directly improves client security outcomes and strengthens Beazley Security’s products and services. The team conducts in-depth cybersecurity research, derives insight from incident response engagements and MDR findings, and proactively identifies emerging threats and vulnerabilities to deliver timely security advisories and detection logic for our Exposure Management platform.

Beazley Security Labs also provides operational threat intelligence that supports Managed Detection and Response and Incident Response teams through threat hunts and threat actor profiling, while also producing original research, quarterly threat reports, and industry content that builds Beazley Security’s credibility and brand. With the ultimate goal of making adversaries less effective, Labs serves as a critical bridge between frontline incidents, product innovation, and thought leadership.

About the Role:

The window between vulnerability disclosure and mass exploitation keeps getting shorter. As a Vulnerability Detection Engineer on Beazley Security Labs, your job is to close that window for our clients. When a critical vulnerability drops, you figure out how to reliably identify it from the internet, build a detection for it, prove it works, and ship it to our Exposure Management platform so clients know whether they are exposed before an attacker does. This work rewards a certain curiosity about how software breaks, and the patience to keep asking how to identify vulnerable systems from the internet.

You will work as part of the Beazley Security Labs research team to identify and analyze emerging threats and critical vulnerabilities, and to own the delivery of detection logic that surfaces that exposure in client environments. The role combines vulnerability analysis, exploit research, and threat intelligence with the engineering work required to turn research findings into real world detections. You will use agentic workflows as part of that process, building skills and automation that accelerate research, validation, and detection development. The role also contributes to Beazley Security Labs research supporting security operations, incident response, and client advisories.

Key Responsibilities:

• Conduct vulnerability research on internet exposed services and software, working with the BSL research team to determine what a vulnerable instance looks like in collected scan data
• Monitor vendor advisories, vulnerability disclosures, and help determine which vulnerabilities warrant detection coverage based on exploitability and exposure across our client base
• Analyze proof of concept exploits in lab environments to identify the version strings, response behaviors, service fingerprints, and configuration artifacts that distinguish vulnerable systems and services
• Author, test, and maintain vulnerability detection logic against Exposure Management scan data, and own detection lifecycles
• Develop and maintain scan configurations that collect the data detections depend on, including service fingerprinting, targeted protocol probes, and response parsing
• Validate new and existing software detections across client asset data, and be accountable for the false positive and false negative rates of the coverage you own
• Build and improve internal tooling and automation for vulnerability monitoring, detection authoring, and regression testing
• Collaborate on technical write ups, advisories, and remediation guidance that accompany your detections, and contribute to Beazley Security Labs intelligence reporting and published research
• Partner with other internal departments to convert frontline intrusion findings into proactive detection coverage within Exposure Management
• Apply where Agentic AI can be leveraged to improve our existing processes analyzing new vulnerabilities reported by the industry.
• Research where Agentic AI can be leveraged to improve our existing processes of discovering affected software in our client base, validating vulnerable status, and producing advisory content.

Required Qualifications:

• Proficiency writing analytical SQL, including joins, aggregations, and regular expression matching, with the ability to reason about query correctness and performance against large datasets
• Working proficiency in Python for data manipulation, parsing, tooling, and automation
• Proficiency designing and applying agentic AI workflows and AI harnesses to detection research and engineering, including building reusable skills, automating research and validation, and operationalizing detection deployments at scale
• Experience with Git, code review, and testing practices in a detection engineering environment
• Strong grasp of networking fundamentals, HTTP, TLS, and web application architecture, sufficient to interpret raw service responses and understand how to fingerprint software
• Practical understanding of common vulnerabilities and how they are exploited, including authentication bypass, remote code execution, injection flaws, deserialization attacks, and path traversal
• Ability to read a vendor advisory or public proof of concept code and independently determine what evidence would confirm a vulnerable instance
• Demonstrated ability to work carefully with ambiguous or incomplete data

Preferred Qualifications

• Experience writing detection, alerting, or analytic logic against large-scale telemetry or scan data in a data warehouse environment
• Experience with data quality work identifying gaps, inconsistencies, or drift in upstream collection
• Familiarity with detection and scanning frameworks such as Nuclei or Nmap NSE, and an understanding of how their scanning logic works
• Experience collaborating in a code repository and using AI assisted coding tools
• Exposure to vulnerability prioritization frameworks including CISA KEV, EPSS, CVSS, and CWE
• Experience building isolated lab environments with Docker or virtual machines to reproduce vulnerable software
• Experience with patch diffing, binary analysis, or reverse engineering
• Published CVEs, bug bounty findings, open-source security tooling contributions

Beazley Security Offers:

• Competitive salary and bonus.
• Flexible working arrangements.
• Generous leave policies including 3 months paid parental.
• 100% of employee-only insurance premiums covered (healthcare, dental and vision).
• Up to 5% matched 401k contribution.
• Opportunities for career advancement and ongoing training.
• Participation in industry conferences and events.