Staff Security Researcher – Remote Europe

About the role

You are a hands‑on offensive security researcher who enjoys turning vulnerability and malware knowledge into detection content that ships. You take ownership of the security checks you build, write clean and accurate detection rules, and care deeply about quality and low false‑positive rates.

Key responsibilities

• Create new detection rules (primarily OpenGrep) to catch novel malware and vulnerability patterns.
• Extend support for new programming languages across the analysis pipeline.
• Research novel exploitation techniques for modern web applications, APIs, cloud‑native environments and AI‑driven systems.
• Design and maintain evaluation harnesses, testing frameworks and benchmarking systems to measure detection accuracy and false‑positive rates.
• Write and publish blog posts, CVEs and tool releases, representing the company in the security community.
• Mentor junior and mid‑level researchers and collaborate across engineering, product, AI/ML and infrastructure teams.

Required profile

• 8+ years of offensive security or application security research experience.
• Broad knowledge of programming languages, with JavaScript required and Python a strong plus.
• Deep understanding of vulnerability classifications, exploitation methodologies and secure software development practices.
• Experience designing large‑scale testing frameworks and evaluation harnesses for security tooling.

Required skills

• JavaScript, Python
• OpenGrep / Semgrep
• Detection writing for DAST scanners or fuzzers
• Burp Suite, sqlmap, nmap, ffuf, custom payload generation
• Cloud platforms, Kubernetes, containers, infrastructure‑as‑code, CI/CD security
• LLM‑powered application security, AI agent security, prompt injection mitigation
• YARA

What we offer

• Tailored health, pension and statutory benefits per country of residence.
• Fully remote work with flexible hours (CET ± 2).
• Quarterly Thrive‑Wellness days – an extra vacation day each quarter.
• Volunteerism time off (5 days per year) and paid birthday off.
• Employee recognition, growth opportunities and a diverse, inclusive culture.