Build validation logic capable of determining whether existing security controls such as WAFs, firewalls, EDRs, IPS, and compensating controls effectively prevent exploitation.
Drive automation initiatives for vulnerability research, exploit validation, content generation, testing, and release processes.
Establish best practices, coding standards, and quality guidelines for signature development.
Qualifications
Bachelor's degree in a relevant field (or equivalent experience).
8+ years of hands-on experience in vulnerability research, penetration testing, detection engineering, or security research.
Deep understanding of TCP/IP, HTTP/HTTPS, FTP, SSH, SMTP, DNS, SSL/TLS, and modern web protocols.
Strong expertise in vulnerability analysis, exploit development, and attack techniques.
Extensive knowledge of operating systems, databases, web technologies, cloud environments, and enterprise infrastructure.
Strong coding background.
Experience with packet analysis, network troubleshooting, and protocol reverse engineering.
Knowledge of OWASP Top 10, common attack techniques, and modern threat actor tactics.
Excellent written, verbal, and technical communication skills.
Demonstrated experience leading projects and mentoring technical teams.
Additional Plus Competencies
Understanding of Lua (preferred), Bash, or Python.
Knowledge of Cloud Platforms (AWS, Azure, Oracle, etc.).
Proficient with regular expressions.
Knowledge of container technologies such as Docker and Kubernetes.
Experienced in the use of vulnerability scanners, IDS, and security tools.
OSCP, CISSP, or SANS GIAC certifications.
