Lead Security Engineer

Overview

Lead Security Engineer on the Vulnerability Research Development team, researching, developing and delivering detection signatures for vulnerability scanning products.

What you'll do

• Research vulnerabilities in applications, operating systems, databases, TCP/IP protocols, network devices and various services.
• Develop, test and maintain high-quality detections for known vulnerabilities and 0-day threats.
• Research new and emerging technologies to identify vulnerabilities and exploits.
• Drive technical direction, prioritization and execution of detection development initiatives.
• Collaborate with security researchers, product teams and QA engineers to ensure timely delivery of detection content.
• Research Zero-day vulnerabilities and actively attack vulnerabilities to deliver fast detection content within hours of vulnerability disclosure.
• Act as a technical escalation point for complex vulnerability research and detection challenges.
• Stay up to date with the latest CVEs, advisories and security intelligence feeds.
• Work with Customer Support and Research teams to troubleshoot and triage customer issues such as false positives and false negatives.

What you'll need

• 7+ years of industry experience in network and systems security.
• In-depth knowledge of TCP/IP, SSL, HTTP, FTP, SSH, DNS and others.
• Knowledge of OWASP top 10 and familiarity with other web-based attacks.
• Proficiency in at least one scripting language (Python, Bash, Go).
• Ability to quickly analyse proofs-of-concept or exploits and translate them into accurate signatures.
• Experience with network analysis tools and analysis of packet captures.
• Knowledge of different databases (Oracle, DB2, etc.) and system administration.
• Strong understanding of VPN, firewalls, intrusion detection systems (IDS) and security tools.
• Excellent written and verbal communication skills.
• Educational qualification: BE/B.Tech/MCA, preferably in Computer Science, Information Technology or a related field.

Nice to have

• Experience with large-scale vulnerability management programs.
• Proficient with regular expressions and system administration.
• Demonstrated ability to drive strategic initiatives and independently own technical roadmaps.
• Knowledge of cloud platforms (AWS, Azure, Oracle, etc.).
• Knowledge of container technologies such as Docker and Kubernetes.
• OSCP, CISSP or SANS GIAC certifications.

Details

• Location: Pune.