Security Researcher (Junior)
Reports to: Director of Security & Compliance
You're the person who, when an antivirus flags a file, doesn't just accept it. You want to know which signature fired, why, and whether it's right. You've poked at how networks get classified, maybe run a home lab, and you're more interested in how detection actually works than in collecting certs.
We're looking for someone early in their career who wants to go deep, fast. You'll wear several hats reporting to the Director of Security & Compliance: keeping our software in good standing with the AV ecosystem, researching how our network is detected (both sides of that game), and helping harden our own house. We'll teach you the rest.
Responsibilities
- AV / AMTSO liaison. Monitor how security vendors classify our software, file and track false-positive disputes, pursue allowlisting, and engage AMTSO processes. Keep code-signing reputation healthy.
- Proxy detection research, offensive and defensive. Study how detection vendors classify residential proxy traffic, reproduce their methods, and recommend hardening. Understand both how detection works and how to stay legitimate.
- Internal security hardening. Assist with vulnerability management, configuration hardening, and secure-by-default practices across our infrastructure.
- Abuse / threat triage. Help investigate abuse signals and turn them into detections or policy.
- Document findings clearly and build small scripts and tools to make the above repeatable.
Requirements
- 0-2 years of experience. Internships, home labs, CTFs, and personal projects count.
- Solid networking fundamentals: TCP/IP, DNS, HTTP/TLS, and a basic grasp of IP reputation and ASNs.
- Scripting ability, Python preferred. You can automate a repetitive task without hand-holding.
- An adversarial, curious mindset. You ask "how would I detect this?" and "how would I get around it?" in the same breath.
- Professional enough to represent us to AV vendors and standards bodies in writing.
- Bonus: Familiarity with AV / EDR detection, false positives, or code signing.
- Bonus: Knowledge of the proxy / VPN ecosystem or IP fingerprinting.
- Bonus: OSINT experience or a home lab you can talk about.