Remote Senior Cybersecurity Researcher

Description:

• We are looking for a Senior Cybersecurity Researcher to play a key role in maintaining our industry-leading vulnerability database, which is based on a Python/Django/Postgres stack.
• Your focus will be on software supply chain security and vulnerability analysis, with a particular emphasis on Python, Java, and JavaScript ecosystems.
• Responsibilities include reviewing and assessing the validity of known vulnerabilities, occasionally delving deeper to thoroughly understand the issues at hand.
• You will contribute to the development and maintenance of the vulnerability database, focusing on Python, Java, and JavaScript ecosystems.
• The role involves experimenting with and discovering novel ways to detect potential vulnerabilities in packages or software.
• You will collaborate with data engineers to translate novel vulnerability detection methods into systematic, repeatable processes within our data processing system.
• Working closely with the Lead System Architect and Senior Data Engineer, you will integrate security findings into the data processing system.
• You will develop and optimize AI-driven modules and components to enhance the system's security capabilities.
• Staying up-to-date with the latest security trends and incorporating this knowledge into the system is essential.
• Embracing a fast-paced, iterative development approach, you will deliver working solutions quickly and continuously improve based on feedback.
• As a Senior Cybersecurity Research Engineer, your work will have a massive impact on the cybersecurity landscape, empowering organizations worldwide to safeguard their software supply chains and mitigate vulnerabilities.

Requirements:

• Candidates must have 10+ years of overall technical experience.
• A minimum of 5+ years of experience in cybersecurity research, specifically in software supply chain security, is required.
• Strong programming skills in Python, Java, and JavaScript are essential, along with an understanding of their package ecosystems and associated vulnerabilities.
• Experience using LLMs, such as GPT, Claude, or Copilot, for security research and analysis is necessary.
• Excellent problem-solving and communication skills are required.
• The ability to work collaboratively in a fast-paced, agile environment is essential.
• Candidates should be passionate about staying at the forefront of cybersecurity research and AI-driven solutions.
• The ideal candidate thrives in a fast-paced startup environment, is comfortable with rapid iterations, and is adaptable to changing requirements.
• Being a resourceful and creative problem-solver, able to deliver results with limited resources and tight deadlines, is crucial.

Benefits:

• The position offers a salary of $120,000 to $150,000 CAD per year, depending on experience.
• A healthcare plan is included as part of the benefits.
• There is a generous equity stock options plan available.
• The role is remote worker friendly, allowing for flexible work arrangements.