Description:

TuxCare is seeking a Senior / Principal Security Research Engineer for the SecureChain project, focusing on open-source software supply chain security.
The role involves building production-quality tools and pipelines for security research and automation.

Requirements:

Background in security research, specifically in malware or software supply-chain research, vulnerability discovery, and root-cause analysis.
Proficiency in Python or another systems language for building production tools and pipelines.
Experience with CI pipelines, test automation, and operating services.
Practical knowledge of static analysis, fuzzing, and sandboxing.
Daily use of AI-assisted tools in research and engineering.
Familiarity with multiple package ecosystems (e.g., PyPI, npm, Maven, Go).
Ability to produce clear research reports and experience with coordinated disclosure.
Advanced written and spoken English skills.

Focus on professional development and challenging projects.
Fully remote work with flexible hours.
Paid 24 days of vacation, 10 national holidays, and unlimited sick leave.
Compensation for private medical insurance and reimbursement for co-working and gym/sports.
Budget for education and potential rewards for innovative ideas.

Skills

Benefits