Security Research Analyst

Job Summary

Researching web application threats, the hybrid Security Research Analyst will develop managed rules to protect customers from vulnerabilities and attacks while collaborating with engineering and product teams to enhance WAF protections.

Key responsibilities:

• Research vulnerabilities and exploitation by analyzing public CVEs and proof-of-concept exploits to understand root causes and mitigation opportunities
• Develop and maintain managed rules by designing, testing, and deploying WAF rules and exploit signatures to adapt to evolving threats
• Investigate false positives and missed attacks by analyzing customer reports and request telemetry, refining detections to improve protection

Required qualifications:

• Hands-on experience in web application security, vulnerability research, or detection engineering
• Strong understanding of HTTP/HTTPS and common web application vulnerabilities such as SQL injection and cross-site scripting
• Proficiency in SQL for analyzing large datasets and familiarity with programming languages such as Python, Go, or Rust
• Experience with automated testing and validation processes in security contexts
• Curiosity about web application exploitation and a desire to deepen knowledge in the field