Security Analyst

We are looking for a Vulnerability Researcher to join our Security Intelligence team to analyze known vulnerabilities and discover unknown vulnerabilities. Our scope is open source packages, including those distributed by the largest Linux distributions.

Your Role

In modern software development, much of any project's code relies on open source packages. These are out there in the world, visible for anyone; and within that code there are vulnerabilities. As part of our security intelligence team, you'll join us on our mission to continuously provide actionable analysis of these vulnerabilities that can be used by developers and security professionals.

You'll join our interdisciplinary security intelligence team, alongside fully dedicated engineers focused on building tools that make your work more effective, and have lots of opportunities to learn and grow. This role is particularly well-suited to candidates with a deep understanding of how code works, and over time you'll have the opportunity to work with a wide variety of programming languages. You can read in depth about the way the teams data are used as the basis for the leading software security platform on blog.

Youll spend your time:

Triaging and analyzing potential vulnerabilities discovered in open source dependencies
Further researching known vulnerabilities to determine characteristics such as severity and exploitability
Verifying or disqualifying potential vulnerabilities via hands-on research
Assessing and building in new vulnerability sources
Cross-pollinating security knowledge and techniques with group members to keep the learning flowing
Exploring the new abilities we need to develop our data products to further our mission
Developing and testing new ways to improve the teams workflows