Lead threat-focused vulnerability research across enterprise applications, APIs, operating systems, network devices, cloud services, containers, open-source components, commercial products, and emerging AI-enabled technologies.
Locations (4)
Saint Petersburg, Florida, United States
Southfield, Michigan, United States
Memphis, Tennessee, United States
Denver, Colorado, United States
Compensation
The total compensation for this position includes base salary or wages, and may include components such as additional compensation (cash or equity), discretionary bonuses, or commissions.
Responsibilities
Lead threat-focused vulnerability research across enterprise applications, APIs, operating systems, network devices, cloud services, containers, open-source components, commercial products, and emerging AI-enabled technologies.
Continuously analyze threat intelligence, vendor advisories, public exploit research, malware and campaign reporting, security-research disclosures, and internal telemetry to identify vulnerabilities with credible relevance to the enterprise.
Perform authorized, controlled technical research to validate vulnerability conditions, affected versions, attack prerequisites, exploitability, reachability, likely impact, and available mitigations without creating unnecessary operational risk.
Develop safe detection and validation content such as authenticated checks, queries, signatures, scripts, test harnesses, configuration assessments, and exposure analytics.
Build production-quality automation and integrations that ingest, normalize, enrich, correlate, deduplicate, prioritize, ticket, route, retest, and close vulnerability findings across scanners, asset inventories, threat-intelligence sources, software inventories, cloud platforms, endpoint tools, and engineering systems.
Requirements
High School (HS) - Completed
Nice to have: Offensive Security Certified Professional (OSCP)
Nice to have: Offensive Security Experienced Penetration Tester (OSEP)
Nice to have: Offensive Security Web Expert (OSWE)
Nice to have: GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)