Staff Security Research Engineer
Staff Security Research Engineer
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
Position Summary
Harness is expanding into DevSecOps with the integration of Traceable and were hiring a Staff or Principal Security Research Engineer to help lead the charge. This is a rare opportunity to work with visionary leaders like Jyoti Bansal and help shape security across the modern software delivery lifecyclefrom code to cloud.
Youll drive research into cuttingedge threats targeting APIs CI/CD pipelines and emerging technologies like LLMs. Your work will directly influence product direction detection capabilities and customer protection strategies. This is a handson highimpact role where youll collaborate across teams interface with toptier customers and represent Harness at leading security conferences.
If youre passionate about solving hard security problems at scale this role puts you at the center of innovation in a fastgrowing DevSecOps platform.
About the role
- Conduct cuttingedge research on modern attack vectors across AppSec CI/CD pipelines runtime environments and emerging technologies like LLMs
- Develop and refine advanced exploit techniques to prevent attacks targeting software delivery runtime from code to cloud
- Collaborate with research product and engineering to prototype and implement detection and mitigation strategies for emerging threats
- Perform indepth security assessments and penetration testing of web applications APIs build systems and cloudnative environments
- Engage with customers to understand their application landscape and provide expert guidance on integrating product capabilities with their security requirements
- Support presales POCs and postsales engagements by troubleshooting and solving complex detection and protection challenges
- Build internal tools to automate and enhance security research workflows.
- Evangelize our research and platform through blogs white papers and talks at premier security conferences
- Analyze global cybersecurity incidents to extract learnings and apply them across domains
About you
- Bachelors or Masters degree in Computer Science.
- 810 years of work experience
- Deep expertise with modern application stacks (microservices containers Kubernetes cloud platforms like AWS/GCP)
- Prior development experience and a fair understanding of programming languages and frameworks are a must
- Proficient in at least one modern programming language (Python Go Java JavaScript etc.)
- Demonstrated experience in penetration testing vulnerability research and exploitation of Web/API ecosystems
- Strong foundation in computer science fundamentals identity aware network application and runtime security
- Strong experience with various pen testing tools like Burpsuite ZAP etc.
- Strong applied knowledge of attacks in Web/API ecosystem Web attacks API attacks API abuse API Fraud ATO etc.
- Strong knowledge of modern application security threats and mitigation platforms like (WAFs WAAP RASP etc.).
- Working knowledge of IAST DAST and SAST
- Experience in responsible disclosure of vulnerabilities and a track record of CVEs or similar
- Proven track record of publishing highquality research or presenting at top security conferences (e.g. Black Hat DEF CON RSAC BSides) is a strong plus
- Certifications such as CEH OSCP OSCE or relevant security credentials
- Strong analytical skills and the ability to conduct complex security research autonomously
- Ability to work autonomously and drive complex security investigations from hypothesis to implementation
Work Location
San Francisco Bay Area Hybrid
What you will have at Harness
- Competitive salary
- Comprehensive healthcare benefits
- Flexible Spending Account (FSA)
- Flexible work schedule
- Employee Assistance Program (EAP)
- Flexible Time Off and Parental Leave
- Monthly quarterly and annual social and team building events
- Monthly internet reimbursement
Pay transparency: Equity is offered in addition to the salary below.
Harness in the news:
- Harness Grabs a $150m Line of Credit
- Welcome Split!
- SF Business TimesFastestGrowing Private Companies in the Bay Area
- Forbes 2024 Americas Best Startup Employers
- SF Business Times 2024 Fastest Growing Private Companies Awards
- Fast CoBest Workplaces for Innovators
All qualified applicants will receive consideration for employment without regard to race color religion sex or national origin.
Note on Fraudulent Recruiting/Offers
We have become aware that there may be fraudulent recruiting attempts being made by people posing as representatives of Harness. These scams may involve fake job postings unsolicited emails or messages claiming to be from our recruiters or hiring managers.
Please note we do not ask for sensitive or financial information via chat text or social media and any email communications will come from the domain @. Additionally Harness will never ask for any payment fee to be paid or purchases to be made by a job applicant. All applicants are encouraged to apply directly to our open jobs via our website. Interviews are generally conducted via Zoom video conference unless the candidate requests other accommodations.
If you believe that you have been the target of an interview/offer scam by someone posing as a representative of Harness please do not provide any personal or financial information and contact us immediately at. You can also find additional information about this type of scam and report any fraudulent employment offers via the Federal Trade Commissions website ( or you can contact your local law enforcement agency.
Required Experience:
Staff IC
Employment Type
Full-Time
