Product Vulnerability Engineer

What you'll do

• Lead the response to lower and moderate severity security vulnerabilities.
• Participate in the response to high severity security vulnerabilities.
• Triage multiple security vulnerabilities to differentiate urgent issues from important ones.
• Collect and analyze code artifacts to assess potential impact of exploited vulnerabilities.
• Formulate action plans to resolve complex security problems and threats.
• Communicate complex security scenarios clearly to non-technical colleagues.
• Research and learn unfamiliar technologies to investigate and resolve security issues.
• Reproduce proof of concept exploitation steps for identified vulnerabilities.

What we're looking for

• Must be a U.S. citizen (U.S. born or naturalized) who does not hold dual citizenship.
• Must be able to meet customer and government screening standards and complete a U.S. federal government Minimum Background Investigation.
• 5-7 years of experience in information security or closely related roles with direct experience in security vulnerability response.
• Experience managing common security vulnerabilities, such as the OWASP Top 10.
• Application forensics skills, including collecting and analyzing code artifacts to assess potential impact.
• Exceptional technical basics in networking fundamentals, common application protocols, system architecture, and software development.
• Strong knowledge of web proxy tools and techniques.
• Relevant incident response or information security certifications, such as GIAC GWAPT, GCIH, GPEN, GXPN, or Offensive Security OSCP (preferred).