Senior Security Research Engineer

Job Description:

We are looking for a highly skilled and motivated  Senior Security Research Engineer  to join our Vulnerability Detection Signature Research team. In this role, you will research, develop, and deliver vulnerability detection signatures for our scanning products. You will investigate and resolve vulnerability scanning and detection issues that impact our customers, working within our sustenance research team to ensure expert handling of customer concerns and support escalations. Collaboration with cross-functional teams will be key to resolving complex challenges. 

This position demands a strong technical foundation in vulnerability management, scanning tools, and security best practices, along with the ability to own problems end-to-end, mentor peers, and handle customer-facing issues with confidence. 

Responsibilities 

• Research, develop, implement, and continuously improve vulnerability detections and scanning processes for our products. 

• Investigate, analyze, and troubleshoot vulnerability detection issues reported by customers, then modify the code to resolve these problems. 

• Participate in and help drive customer calls and meetings, ensuring that all issues are clearly understood and effectively addressed. 

• Dedicate time to staying up to date with the latest vulnerabilities, attacks, and countermeasures. 

• Help coordinate team tasks, prioritize work, and ensure timely resolution of customer issues. 

• Mentor junior engineers and share knowledge across the team. 

• Explore, where valuable, how AI/ML techniques can accelerate research, development, and validation such as automated signature generation, false positive/negative reduction, anomaly detection, and triage of emerging vulnerabilities. 

Required Qualifications 

• 4+ years of experience in network and systems security. 

• BE/B.Tech/MCA, preferably in Computer Science, Information Technology, or a related field.

• Deep understanding of common protocols: TCP/IP, HTTP, FTP, SSH, SSL/TLS. 

• Strong knowledge of common security vulnerabilities and mitigation techniques. 

• Hands-on experience with Python and Bash scripting. 

• Hands-on working experience with containers and orchestration tools (Docker, Kubernetes). 

• Familiarity with network analysis tools and packet capture analysis. 

• Ability to prioritize and manage multiple tasks in a fast-paced environment. 

• System administration experience on Windows or Unix/Linux platforms. 

• Strong understanding of VPNs, Firewalls, and IDS/IPS technologies. 

• Excellent written and verbal communication skills. 

Preferred Qualifications:

• Exposure to applying AI/ML to security problems - e.g., using machine learning for detection, classification, anomaly detection, or pattern recognition, or leveraging LLMs to automate research, code, or content-generation workflows. 

• Knowledge of Lua (preferred) or Java. 

• Experience with virtualization platforms such as VMWare, VirtualBox, XEN, etc. 

• Understanding of cloud platforms (e.g., AWS, Azure, Oracle Cloud). 

• Experience using or developing vulnerability scanners, IDS/IPS, and other security tools. 

• Prior experience building security-related tools or automation. 

• Industry certifications such as OSCP, CISSP, and GIAC. 

• Ability to lead projects independently and work with minimal supervision.