описание
The company secures the AI-driven SDLC from prompt to production by unifying development and cloud context to stop vulnerabilities at the source.
задачи
- No tasks specified
требования
- 5+ Years of hands-on experience in offensive security, vulnerability research, or application security
- Deep understanding of web application and API vulnerabilities, including business-logic flaws and multi-step attack chains
- Strong coding skills in Python, Go, or similar, with production-quality code shipped
- Experience building or tuning detection logic (SAST, DAST, SCA, secrets, or custom rule engines) and reducing false positives
- Solid understanding of modern stacks, including CI/CD pipelines, containers, Kubernetes, and at least one major cloud provider
- Hands-on use of LLMs or AI models for security tasks, with the judgment to assess where they help and where they fail
- Comfort with large datasets (SQL, BigQuery, or similar) to drive research and measure detection accuracy
- Ability to take research ideas from prototype to production with minimal guidance
- Clear written communication and ability to explain complex attack paths to engineers and product managers
- M.Sc. in Computer Science, Cyber Security, or a related field
- Будет плюсом: published research, CVEs, conference talks, or a bug bounty track record; experience building AI agents or evaluation frameworks for LLMs; background in exploit development, red teaming, or penetration testing; code analysis techniques (taint analysis, call graphs, reachability); contributions to open-source security tools
условия
- Условий в вакансии нет
