Senior Security Researcher

Burlington, CO - USA

Monthly Salary: Not Disclosed

Posted on: Yesterday

Vacancies: 1 Vacancy

Job Summary

Looking for an innovative high-growth multi-award-winning company in one of the hottest segments of the security market Look no further than Veracode!

Veracode is a global leader in Application Risk Management for the AI era. Powered by trillions of lines of code scans and a proprietary AI-generated remediation engine the Veracode platform is trusted by organizations worldwide to build and maintain secure software from code creation to cloud deployment.

Learn more at on theVeracode blog and onLinkedInandTwitter.

Senior Security Researcher

We are seeking a Senior Security Researcher to join Veracodes Applied Research Group. The Senior Security Researcher will lead research projects for improving the capabilities and quality of Veracodes Static Application Security Testing (SAST). They will also conduct original security research to give back to the community and advance its knowledge.

What you will be responsible for:

Conduct research to identify potential weaknesses and security vulnerabilities in C / C and C# / .NET applications as well as others as the need arises.
Describe vulnerabilities and potential exploits and produce proofs of concept and representative examples to aid engineering teams in building product capabilities
Engage in binary and source static analysis/reverse-engineering of applications
Conduct research to improve automation accuracy and efficiency of detection techniques and related systems using both our own proprietary software as well as open-source tools.
Contribute expertise to Veracodes customer- and public-facing documentation to ensure information is current accurate and actionable
Mentor and provide technical guidance to developers and researchers
Actively participate in the software security community by attending and presenting at industry conferences conducting and publishing original research contributing articles to the Veracode blog and/or trade blogs and magazines etc.

Required Skills:

2 years of practical reverse-engineering or binary static-analysis experience including familiarity with Abstract Syntax Trees (AST) reflection or other code transformation approaches; compilers and associated tooling; and decompilers disassemblers and/or debuggers used in binary analysis
1 years of practical application security experience such as source code auditing penetration testing product assessment vulnerability research
The ability to enter a breaker mentality Veracode is defensively-oriented but our research requires an offensive mindset including the ability to asses the attack surface of a piece of software.
Prototyping ability must be comfortable producing quick and dirty hacks to demonstrate a concept or solve a one-off problem
Strong professional skills:

Attention to detail as part of a commitment to quality
Analytical and organizational capability for advocating planning and executing projects independently
Ability to understand technical and security issues from a customer points of view

Strong written and verbal communication ability in English especially technical writing for a developer audience

What we offer you:

Outstanding Medical Dental and Vision Coverage to meet all your healthcare needs.
Wellness benefits to help you focus on whats most important.
Take What You Need time off policy.
Extensive development and training offerings to help you grow your career at Veracode.
Generous 401k match to help save for your future.
Amazing community of professionals who take pride in what we do every day.

Compensation Transparency

In accordance with U.S. pay transparency laws Veracode provides compensation transparency for roles based in the United States. Clickhereto view our compensation ranges by grade. Please note specific compensation may be influenced by various factors including candidates experience education and work location.

Job Grade: Senior

Employment opportunities are available to all applicants without regard to race religion color national origin gender sexual orientation age marital status veteran status or disability status.

Fraudulent Recruitment Alert - Be Aware and Stay Informed

At Veracode we prioritize a secure recruitment process. Unfortunately fake recruitment and job offer scams are on the rise. They aim to deceive candidates through emails and calls to obtain sensitive information.

Heres our recruitment promise to you:

Comprehensive Interview Process: We never extend job offers without a comprehensive interview process involving our recruitment team and hiring managers.
Offer Communications: Our job offers are not sent solely through email and we will never ask you to pay for your own hardware.
Email Verification: Recruiting emails from Veracode will always originate from an @ email address.

If you have any doubts about the authenticity of an email letter or telephone communication claiming to be from Veracode please reach out to us atbefore taking any further action.

Required Experience:

Senior IC

Looking for an innovative high-growth multi-award-winning company in one of the hottest segments of the security market Look no further than Veracode!Veracode is a global leader in Application Risk Management for the AI era. Powered by trillions of lines of code scans and a proprietary AI-generated ...