Senior Security Researcher

📋 Description

• Design detection systems for open-source packages at scale
• Hunt malicious packages, typosquats, and CI/CD abuse patterns
• Coordinate with maintainers to file CVEs and advisories
• Build internal tooling using static analysis and AI models
• Publish research blog posts to share findings
• Tune detection signals and reduce false positives; counter sandbox evasion

🎯 Requirements

• 4+ years of security research with CVEs, GHSA, or equivalent advisories
• Deep expertise in malicious packages, RCE, prototype pollution, SSRF, auth bypasses, CI/CD paths
• Experience designing and operating detection pipelines at scale
• Strong programming skills in TypeScript, Python, Go, or Rust
• Proven track record of technical blog posts and using LLMs as research tools

🎁 Benefits

• See your impact every day
• Fast-paced growth environment with learning opportunities
• Inclusive, welcoming culture
• Career advancement and exposure to new technologies