Senior Security Operations Engineer – Remote Europe

About the role

Senior Security Operations Engineer responsible for building and maintaining detection content for Invicti’s application security platform, ensuring high accuracy and low false‑positive rates.

Key responsibilities

• Build and maintain security checks and detection rules (primarily OpenGrep) for novel malware and vulnerability patterns.
• Research vulnerability classes, exploitation techniques, and emerging attack patterns to create production‑ready detections.
• Develop testing frameworks, evaluation harnesses, and attack‑chain templates to validate detection quality and coverage.
• Collaborate with engineering, product, AI/ML, and infrastructure teams to ship and operate detection content.

Required profile

• 5+ years of offensive security or application security research experience.
• Hands‑on web application pentesting covering OWASP Top 10 and modern APIs.
• Strong analytical mindset, ability to research hard problems and algorithms.
• Fluent English with ability to communicate technical details to varied audiences.

Required skills

• JavaScript (mandatory), Python (plus).
• Knowledge of vulnerability classifications, exploitation techniques, and software weakness taxonomies.
• Experience with detection writing for DAST scanners, fuzzers, or similar systems.
• Familiarity with offensive tools such as Burp Suite, sqlmap, nmap, ffuf.

What we offer

• Tailored health, pension and statutory benefits per country of residence.
• Employee Assistance Program with 24/7 counseling and life coaching.
• Remote work flexibility and quarterly extra vacation days.
• Paid time off for volunteering, birthday, and parental support.
• Recognition programs and opportunities for personal and professional growth.