Invicti

Security Engineer

• Create new OpenGrep detection rules for novel malware and vulnerability patterns
• Extend support for new programming languages across the analysis pipeline
• Experiment with tools and techniques to detect threats and malware at scale
• Research exploitation and analysis of modern web applications and APIs
• Build proof-of-concept attacks and translate findings into shippable capabilities
• Research vulnerability classes, exploitation techniques, cloud-native attack paths, and AI-specific attack vectors
• Convert research into production-ready detections
• Contribute to research standards, policies, and attack methodologies
• Build attack chain templates combining low-severity findings into high-impact exploitation paths
• Design and maintain evaluation harnesses, testing frameworks, and benchmarking systems
• Measure detection effectiveness, exploit reproducibility, false-positive rates, and coverage
• Contribute to internal research and shape the public research agenda
• Write and publish blog posts on novel attacks and large-scale incidents
• Represent Invicti in the security community through CVEs, tool releases, and conference contributions
• Monitor AppSec, AI red-teaming, offensive AI, LLM vulnerabilities, agent security, MCP security, and cloud-native attack trends
• Triage analysis-pipeline packages and validate findings
• Mentor junior and mid-level researchers
• Collaborate with engineering, product, AI/ML, and infrastructure teams
• Partner with platform and infrastructure teams to improve CI/CD and cloud-native security automation
• Maintain detection quality by triaging difficult or ambiguous findings

Staff Security Researcher – Europe

Security Operations

• Build and maintain security checks and detection content for the Invicti platform
• Create new OpenGrep detection rules for novel malware and vulnerability patterns
• Research vulnerability classes, exploitation techniques, and emerging attack patterns
• Translate research into production-ready detections
• Extend support for new programming languages across the analysis pipeline
• Triage analysis-pipeline packages and validate findings
• Build attack-chain templates combining low-severity findings into higher-impact detection scenarios
• Contribute to evaluation harnesses and benchmarks measuring false-positive rates, coverage, and accuracy
• Build and maintain testing frameworks for detection quality, exploit reproducibility, and regression coverage
• Triage difficult or ambiguous findings and maintain platform detection quality
• Refine internal detection and exploitation standards and methodologies
• Explore new tools and techniques for detecting threats and malware at scale
• Apply current AppSec, offensive security, AI security, LLM vulnerability, AI agent security, MCP security, and emerging attack research to detection engineering
• Collaborate with engineering, product, AI/ML, and infrastructure teams
• Integrate detection, testing, and validation into cloud-native infrastructure and CI/CD pipelines

Senior Security Operations Engineer – Europe

• Create new OpenGrep detection rules for novel malware and vulnerability patterns
• Extend support for new programming languages across the analysis pipeline
• Experiment with tools and techniques for detecting threats and malware at scale
• Research exploitation and analysis techniques for modern web applications and APIs
• Build proof-of-concept attacks and translate findings into shippable capabilities
• Research vulnerability classes, exploitation techniques, cloud-native attack paths, and AI-specific attack vectors
• Convert security research into production-ready detections
• Apply existing detection and exploitation principles and contribute to research standards and attack methodologies
• Build attack-chain templates combining low-severity findings into high-impact exploitation paths
• Design and maintain evaluation harnesses, testing frameworks, and benchmarking systems
• Measure detection accuracy, exploit reproducibility, false-positive rates, and coverage
• Contribute to internal research and shape the public research agenda
• Write and publish blog posts on novel attacks and large-scale incidents
• Represent Invicti in the security community through CVEs, tool releases, and conference contributions
• Monitor AppSec, AI red-teaming, offensive AI, LLM vulnerabilities, agent security, MCP security, and cloud-native attack trends
• Triage analysis-pipeline packages and validate findings
• Mentor junior and mid-level researchers on detection writing and exploitation techniques
• Collaborate with engineering, product, AI/ML, and infrastructure teams to ship and operate research output
• Partner with platform and infrastructure teams to improve CI/CD and cloud-native security automation
• Maintain detection quality by triaging difficult or ambiguous findings

Staff Security Researcher

• Create new detection rules, primarily OpenGrep, for novel malware and vulnerability patterns
• Extend support for new programming languages across the analysis pipeline
• Experiment with tools and techniques to detect threats and malware at scale
• Research exploitation and analysis techniques for modern web applications and APIs
• Build proof-of-concept attacks and translate findings into shippable capabilities
• Research vulnerability classes, exploitation techniques, cloud-native attack paths, and AI-specific attack vectors
• Convert research into production-ready detections
• Contribute to security policies, research standards, and attack methodologies
• Build attack-chain templates combining low-severity findings into high-impact exploitation paths
• Design and maintain evaluation harnesses, testing frameworks, and benchmarking systems
• Measure detection accuracy, exploit reproducibility, false-positive rates, and coverage
• Contribute to internal research and shape the public research agenda
• Write and publish blog posts on novel attacks and large-scale incidents
• Represent Invicti in the security community through CVEs, tool releases, and conference contributions
• Stay current on AppSec, AI red-teaming, offensive AI, LLM vulnerabilities, agent security, MCP security, and cloud-native attack techniques
• Triage analysis-pipeline packages and validate findings
• Mentor junior and mid-level researchers on detection writing and exploitation techniques
• Collaborate with engineering, product, AI/ML, and infrastructure teams
• Partner with platform and infrastructure teams to improve security automation across CI/CD and cloud-native environments
• Maintain detection quality by triaging difficult or ambiguous findings

• Build and maintain security checks and detection content for the Invicti platform
• Create OpenGrep detection rules for novel malware and vulnerability patterns
• Research vulnerability classes, exploitation techniques, and emerging attack patterns
• Translate research into production-ready detections
• Extend support for new programming languages across the analysis pipeline
• Triage analysis-pipeline packages and validate findings
• Build attack-chain templates combining low-severity findings into higher-impact scenarios
• Contribute to evaluation harnesses and benchmarks measuring false-positive rates, coverage, and accuracy
• Build and maintain testing frameworks for detection quality, exploit reproducibility, and regression coverage
• Triage difficult or ambiguous findings and maintain detection quality
• Apply and refine detection and exploitation principles, standards, and methodologies
• Explore tools and techniques for detecting threats and malware at scale
• Monitor AppSec, offensive security, AI security, LLM vulnerabilities, AI agent security, MCP security, and emerging attack techniques
• Collaborate with engineering, product, AI/ML, and infrastructure teams
• Integrate detection, testing, and validation into cloud-native infrastructure and CI/CD pipelines