Senior Security Researcher

About us:
Low-code/no-code (LCNC) platforms empower business professionals more than ever before, enabling them to fulfill their own requirements without relying on IT.
However, this accessibility also exposes vulnerabilities to hackers and potential costly errors.
Our company emerges as the pioneer in security solutions tailored for organizations embracing low-code/no-code development, ensuring robust security governance without compromise.
Recently, we secured $16.5 million in Series A funding, spearheaded by the esteemed Intel Capital, reaffirming our dedication to advancing secure practices in LCNC development.
This substantial investment signals our commitment to scaling operations, advancing technology, and bolstering our team.
Our company has also recently entered the burgeoning AI market, offering security insights tailored for LC/NC AI-related features.
About the job:
We are seeking an experienced Senior Security Researcher to join our Research department, focusing on low-code and no-code platforms.
The ideal candidate should have a minimum of 5 years of relevant experience and a strong background in conducting research, identifying vulnerabilities, and performing in-depth analysis of web and API security within cloud environments.
This role offers a unique opportunity to contribute to the security of emerging technologies that are transforming the software development landscape.
Responsibilities:
Conduct thorough research to identify security weaknesses and vulnerabilities within low-code/ no-code platforms.
Perform in-depth analysis of web and API security, identifying potential threats and developing mitigation strategies.
Collaborate with cross-company teams to proactively address security concerns during the development lifecycle.
Stay up-to-date with the latest industry trends, security threats, and advancements in low-code and no-code technologies.
Develop proof-of-concept exploits, provide recommendations for remediation to affected vendors, and create detections in the company platform.
Contribute to the development of security guidelines, best practices, and standards tailored for low-code and no-code platforms.
Collaborate with external security researchers and organizations to enhance the overall security posture of the low-code/no-code landscape.
Perform publishable research and share it via blog posts, conference talks and meet-ups.