Security Engineer

• Create new OpenGrep detection rules for novel malware and vulnerability patterns
• Extend support for new programming languages across the analysis pipeline
• Experiment with tools and techniques to detect threats and malware at scale
• Research exploitation and analysis of modern web applications and APIs
• Build proof-of-concept attacks and translate findings into shippable capabilities
• Research vulnerability classes, exploitation techniques, cloud-native attack paths, and AI-specific attack vectors
• Convert research into production-ready detections
• Contribute to research standards, policies, and attack methodologies
• Build attack chain templates combining low-severity findings into high-impact exploitation paths
• Design and maintain evaluation harnesses, testing frameworks, and benchmarking systems
• Measure detection effectiveness, exploit reproducibility, false-positive rates, and coverage
• Contribute to internal research and shape the public research agenda
• Write and publish blog posts on novel attacks and large-scale incidents
• Represent Invicti in the security community through CVEs, tool releases, and conference contributions
• Monitor AppSec, AI red-teaming, offensive AI, LLM vulnerabilities, agent security, MCP security, and cloud-native attack trends
• Triage analysis-pipeline packages and validate findings
• Mentor junior and mid-level researchers
• Collaborate with engineering, product, AI/ML, and infrastructure teams
• Partner with platform and infrastructure teams to improve CI/CD and cloud-native security automation
• Maintain detection quality by triaging difficult or ambiguous findings

Staff Security Researcher – Europe

• Monitor and investigate security alerts across cloud, identity, endpoint, and network environments
• Review logs and activity from AWS, GCP, Active Directory, Linux systems, Windows systems, and security tools
• Support incident response by gathering evidence, validating suspicious activity, and documenting findings
• Write scripts to automate repetitive security tasks, log analysis, reporting, or enrichment
• Assist with security reviews covering IAM, storage exposure, compute workloads, and network configurations
• Investigate authentication activity, user behavior, privilege changes, and potential account compromise
• Work with internal teams to understand systems, identify risks, and support remediation, compliance, and audit activities
• Provide after-hours incident response for urgent security events

Senior Security Engineer

• Monitor and investigate security alerts across cloud, identity, endpoint, and network environments
• Review logs and activity from AWS, GCP, Active Directory, Linux systems, Windows systems, and security tools
• Support incident response by gathering evidence, validating suspicious activity, and documenting findings
• Write scripts to automate repetitive security tasks, log analysis, reporting, or enrichment
• Assist with security reviews covering IAM, storage exposure, compute workloads, and network configurations
• Investigate authentication activity, user behavior, privilege changes, and potential account compromise
• Work with internal teams to understand systems, identify risks, and support remediation, compliance, and audit activities
• Be available for after-hours incident response when urgent security events require investigation or support