Senior Web Security Researcher

Description:

As a Senior Web Security Researcher at Nimble, you will spearhead our efforts in the research domain, driving our cutting-edge data gathering solutions. You will work on complex technical challenges at the intersection of browser internals, reverse engineering, and large-scale data gathering. You will analyze and break down advanced client-side protection mechanisms, dive into large and complex codebases such as Chromium, and develop high-performance, cross-platform capabilities that power our products.

This role is both hands-on and research-driven: you’ll be expected to investigate hard problems, turn insights into solutions, and help push the boundaries of what’s possible in web data gathering.

• Reverse-engineer and analyze advanced bot-detection systems, including JavaScript based mechanisms and API interaction flows.
• Analyze and modify large-scale browser codebases that empower our products.
• Apply a deep understanding of browser internals and architecture to improve stability, performance, and resistance to anti-automation measures.
• Collaborate with researchers and developers to integrate findings into production solutions.
• Provide technical guidance and mentorship within the research team.

• At least 5 years of experience working within research teams, with a focus on at least one of the following: web data extraction, reverse engineering, or browser technologies.
• Strong analytical and problem-solving skills, with keen attention to detail and a passion for pushing the boundaries of what’s possible in web data gathering.
• Strong JavaScript skills with hands-on reverse-engineering experience in web contexts.

Advantages

• Hands-on experience with dynamic instrumentation and reverse engineering tools such as Frida, IDA Pro, Ghidra, or Radare2 / Cutter.
• Experience with browser automation frameworks (Puppeteer, Playwright, CDP) and/or anti-scraping / bot-detection mechanisms.
• Familiarity with web-focused IDEs and debugging environments (e.g., Chrome DevTools Protocol, Charles Proxy, Fiddler, Burp Suite, VS Code, WebStorm).
• Prior work with Chromium or Firefox source code.