Description

As a Security Researcher you will focus on simulating our most advanced adversaries against our data collection products affecting thousands of customers.

You will acquire significant knowledge of the web application security field, building new machine learning data collection methods and helping to scale the collection platform to new levels as our customer base continues to grow.

Why You'll Love It:

• You'll be reversing some of the best anti-bot systems on the planet - it doesn't get more cutting-edge than this.
• You'll have a real say in the projects you're part of - this isn't a "just execute" kind of role.
• You can actively shape the way this team works - it's still being built, and your fingerprints will be on it.
• Got an idea? You can take it straight to the COO - no red tape, no politics.
• The people make it - SecRes and are genuinely great teams to be part of.

*Fully remote position for candidates outside of SF area

Responsibilities

• Conducting in-depth research on tools or services that prevent the free collection of public web data.
• Building and improving HTTP client solutions to guarantee the success of Bright's Data collection efforts.
• Identifying new standards and technologies that could impact our data collection capabilities.
• Reverse engineering adversary solutions to prevent fingerprinting solutions from stopping us.
• There’s much more…

Requirements

• 5 years’ experience as an R&D developer / researcher / tester
• A deep understanding of HTTP & TLS protocols
• Experience with at least 2 of the following:

-Programming experience in JavaScript /TypeScript / Python / C++

-Penetration testing experience or offensive security certificates (OSCP, OSEP etc.)

-Professional security research experience (such as web vulnerabilities, mobiles apps etc.)

-Reverse engineering skills (JS deobfuscation or binaries reversing) / malware analysis

-Anti-bot development or other similar products, such as WAF, Anti-Virus development (malware emulation etc.), DDoS prevention etc.

• Experience working at an anti-bot or web security company – a major advantage