Security Researcher II

Reproducing reported security vulnerabilities and identifying the root cause Design and develop automation solutions that assist with vulnerability discovery, reproduction and mitigations.

Working with product teams to comprehensively remediate vulnerabilities and educate them on vulnerability classes such as deserialization, memory corruption, command injection, XSS (cross site scripting), SSRF (server side request forgery), etc.

Analyze reported vulnerabilities for any insights and trends.

Engaging with and contributing knowledge back to the security research community Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 1+ year(s)

in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 2+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection These requirements include, but are not limited to the following specialized security screenings: Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 5+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience. 2+ years of experience in security research, vulnerability analysis, and/or exploit development in on-prem and cloud environments.

investigating security risks within open-source software ecosystems, including software supply chains, dependency management, package repositories (such as npm and NuGet), and build automation environments Experience developing, testing, or maintaining multi-agent and AI-assisted workflows for security use cases, such as code analysis, vulnerability discovery, threat investigation, or automated security research Knowledge of vulnerability research, threat modeling, and security assessment methodologies across open-source technologies, including language runtimes, web frameworks, and foundational software libraries.

collaborating with engineering teams or open-source communities to improve security posture is a plus Experience programming in C# and/or working with the .NET platform to develop, analyze, or secure software applications and services.