Senior Cybersecurity Researcher

We are looking for a Senior Cybersecurity Researcher to play a key role in maintaining our industry-leading vulnerability database, which is based on a Python/Django/Postgres stack. Your focus will be on software supply chain security and vulnerability analysis, with a particular emphasis on Python, Java, and JavaScript ecosystems.

Responsibilities:

• Review and assess the validity of known vulnerabilities, occasionally delving deeper to thoroughly understand the issues at hand
• Contribute to the development and maintenance of the vulnerability database, focusing on Python, Java, and JavaScript ecosystems
• Experiment with and discover novel ways to detect potential vulnerabilities in packages or software
• Collaborate with data engineers to translate novel vulnerability detection methods into systematic, repeatable processes within our data processing system
• Work closely with the Lead System Architect and Senior Data Engineer to integrate security findings into the data processing system
• Develop and optimize AI-driven modules and components to enhance the system's security capabilities
• Stay up-to-date with the latest security trends and incorporate this knowledge into the system
• Embrace a fast-paced, iterative development approach, delivering working solutions quickly and continuously improving based on feedback

Impact:

As a Senior Cybersecurity Research Engineer, you will play a vital role in building and maintaining an industry-leading vulnerability database that will protect and secure the Python, Java, and JavaScript ecosystems. Your work will have a massive impact on the cybersecurity landscape, empowering organizations worldwide to safeguard their software supply chains and mitigate vulnerabilities. Be part of a team that is at the forefront of innovation, leveraging cutting-edge AI technologies to revolutionize the way we approach cybersecurity.

If you are excited about the opportunity to make a significant impact in the cybersecurity domain and build a world-class vulnerability database, we want to hear from you! Join our dynamic and fast-paced startup, where you'll have the chance to work with cutting-edge technologies, shape the future of software supply chain security, and deliver impactful results through iterative deployments.

Requirements

• 10+ years of overall technical experience
• 5+ years of experience in cybersecurity research, specifically in software supply chain security
• Strong programming skills in Python, Java, and JavaScript, complemented by an understanding of their package ecosystems and associated vulnerabilities.
• Experience using LLMs, such as GPT, Claude, or Copilot, for security research and analysis
• Excellent problem-solving and communication skills
• Ability to work collaboratively in a fast-paced, agile environment
• Passionate about staying at the forefront of cybersecurity research and AI-driven solutions
• Thrives in a fast-paced startup environment, comfortable with rapid iterations and adaptable to changing requirements
• Resourceful and creative problem-solver, able to deliver results with limited resources and tight deadlines