Staff Developer

Overview

The Staff Security Content & Integrations Developer will help lead Aurora Exposure Management improvements through security research, vulnerability detection development, security content engineering, and third-party integrations.

What you'll do

• Identify vulnerabilities, system misconfigurations, and exposure risks and turn research into detections.
• Develop and maintain security detection programs for vulnerabilities and misconfigurations.
• Design and build plugins and integrations using public APIs for push/pull data sharing.
• Implement host-based and network-based vulnerability detection and related query capabilities.
• Automate configuration benchmarking and contribute to pipeline hardening and security policy development.
• Create automation and enrichment workflows in scripting languages and participate in incident management and on-call.
• Partner with operational teams to operationalize intelligence into detection, triage, and response workflows.

What you'll need

• Experience in security research engineering focused on vulnerability and misconfiguration detection and security content development.
• Experience using frameworks/methodologies such as OWASP Top 10, MITRE ATT&CK, and CIS Benchmarks.
• Experience designing, writing, testing, and maintaining detection content using NASL, Notus, OVAL, and Derived Exposures.
• Strong programming experience in at least one language such as Python, Go, Rust, or Bash.
• Experience with relational or non-relational databases such as PostgreSQL or MongoDB.
• Experience with cloud environments and container technologies such as AWS and Docker/Kubernetes, plus Infrastructure as Code.
• Operational knowledge of network protocols (e.g., HTTP, SSH, SMB, SNMP, TLS/SSL) and OS internals (Windows Registry, Linux file systems).

Details

• Location: Bengaluru, India.