Senior Security Researcher

Stack

Responsibilities

• ▹Analyze supply-chain attacks
• ▹Dissect malware
• ▹Build open-source security tools
• ▹Collaborate with cross-functional teams to protect users

Requirements

• ▹5+ years as a cybersecurity researcher (supply-chain attacks, malware analysis)
• ▹Familiarity with open-source registry ecosystems (npm, PyPI, Maven)
• ▹Proven ability to ship software in production
• ▹Strong understanding of SDLC and modern CI/CD pipelines
• ▹Comfortable leveraging AI tools to speed up research

Nice to have

• ▹Active contributions to open-source security tools or research
• ▹Hands-on experience with decompilers, debuggers, network traffic analysis
• ▹Advanced malware analysis experience (obfuscation, encryption, sandbox evasion)
• ▹Web application penetration testing experience
• ▹Published CVEs, coordinated disclosures, writeups
• ▹Public speaking experience at major industry conferences (Black Hat, DEFCON, RSAC)

Soft skills

About the company

The company pioneered Active ASPM, built to secure the modern software supply chain in the age of AI, focusing on the small fraction of risks that are truly exploitable.