Senior Security Operations Engineer

Senior Security Operations Engineer

This role offers the opportunity to turn advanced offensive security research into production-ready detection capabilities for modern application security. You will build and maintain security checks designed to identify vulnerabilities, malware, and emerging attack patterns with high accuracy and low false-positive rates. The position combines hands-on security research, detection engineering, testing, and continuous experimentation across evolving threat landscapes. You will work with technologies including OpenGrep, JavaScript, Python, static analysis, cloud infrastructure, and CI/CD pipelines. Your work will also extend into emerging areas such as AI security, LLM vulnerabilities, agentic systems, and MCP security. Collaboration spans engineering, product, AI/ML, and infrastructure teams to ensure detection content is effectively developed, tested, and deployed. This is a hands-on environment for an experienced security professional who enjoys solving complex problems and improving security capabilities at scale.

Accountabilities:

• Build and maintain production-ready security checks and detection content with a focus on accuracy, broad coverage, and low false-positive rates.
• Develop new detection rules, primarily using OpenGrep, to identify novel malware and vulnerability patterns.
• Research vulnerability classes, exploitation techniques, and emerging attack patterns and translate findings into effective production detections.
• Extend analysis capabilities to support additional programming languages and evolving application technologies.
• Triage analysis pipeline packages, investigate findings, and validate detection results.
• Develop attack-chain templates that combine lower-severity findings into higher-impact security scenarios.
• Create and maintain evaluation harnesses, benchmarks, and testing frameworks to measure detection coverage, accuracy, false-positive rates, exploit reproducibility, and regression performance.
• Investigate difficult or ambiguous findings and help maintain consistent detection quality across the platform.
• Apply established detection and exploitation principles while contributing to internal standards and methodologies.
• Experiment with new security tools and techniques for detecting threats and malware at scale.
• Monitor developments in application security, offensive security, AI security, LLM vulnerabilities, agentic systems, and MCP ecosystems and incorporate relevant insights into detection engineering.
• Collaborate with engineering, product, AI/ML, and infrastructure teams to develop, test, integrate, and operate detection content.
• Integrate detection, testing, and validation into cloud-native and CI/CD development environments.

Requirements:

• 5+ years of experience in offensive security or application security research, or equivalent experience, with a relevant bachelor's degree plus 2 years of experience.
• Broad programming knowledge, with strong JavaScript skills required and Python highly desirable.
• Strong understanding of vulnerability classifications, exploitation techniques, and common software weakness taxonomies.
• Experience writing detection logic for DAST scanners, fuzzers, or comparable security systems, including response interpretation and false-positive management.
• Hands-on web application penetration testing experience covering OWASP Top 10 vulnerabilities, authentication, authorization, business logic, REST, GraphQL, and related application security areas.
• Ability to research complex technical problems and work with algorithms and concepts such as Abstract Syntax Trees (ASTs).
• Experience building or maintaining testing frameworks, evaluation harnesses, or automated validation systems is highly valued.
• Familiarity with offensive security tools such as Burp Suite, sqlmap, nmap, ffuf, and custom payload-generation techniques.
• Understanding of and modern web protocols.
• Familiarity with cloud infrastructure, containers, CI/CD, and modern DevOps practices is advantageous.
• Fluent English communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.
• Strong collaboration skills and good judgment around when to escalate complex or high-impact issues.
• Hands-on mindset, intellectual curiosity, and willingness to investigate both established application security challenges and emerging threats.
• OpenGrep or Semgrep experience, static analysis expertise, production system development experience, or exposure to LLMs and prompt engineering are advantageous.
• Security research contributions such as CVEs, advisories, technical talks, open-source tools, or technical writing experience are a plus.
• YARA experience is also beneficial.

Benefits:

• Fully remote working options.
• Health, pension, and statutory benefits tailored to the employee's country of residence.
• 24/7 Employee Assistance Program offering emotional support counseling, life coaching, dependent and elder care, financial and legal support, wellness coaching, and new-parent support.
• Quarterly Thrive-Wellness Days, providing one additional day off each quarter for company-wide rest and renewal.
• 5 days of paid volunteer time off each year.
• Paid birthday day off.
• Employee recognition and rewards programs.
• Opportunities for personal and professional growth and development.
• Flexible, globally oriented Total Rewards approach adapted to regional needs.
• Inclusive and collaborative environment supporting diversity and individuality.