Web Security Researcher

About this role

We are looking to fill the position of a security researcher in our Web team. A person in this role will conduct server-side vulnerability research on Web Applications.

Responsibilities

• Help develop and carry out the Web team research strategy by conducting vulnerability research and exploit development on Web Applications.
• Provide unbiased insights and ideas to the web research team.
• Develop proof-of-concept code and exploits.
• Remain on top of various developments related to Web Technologies such as security mitigations, new features, exploitation techniques, etc.

Requirements

• Track record of finding impactful server-side vulnerabilities (e.g. Auth Bypass, RCE, User to Admin PE) in Web Applications.
• An understanding of web protocols and web architectures.
• Ability to manually detect and exploit common web vulnerabilities.
• Ability to conduct long-term and widely scoped security research projects as part of a broader team effort.
• Stay up to date with emerging trends of web app security and research methods.
• Exploitation experience is a plus, but not required.

What we offer

• Finance: Highly competitive compensation package with an additional monetary bonus system based on exploitable vulnerability findings.
• Career Development: Further your career by joining a team of established and experienced security researchers.
• Work Environment: Fully remote with flexible work schedule.
• Off-topic Research: We allow researchers, at their discretion, to spend up to 15% of their time conducting research on other topics.
• Wellness: We offer a prime wellness program designed to promote a healthy lifestyle, which includes, but not limited to access to gyms around the world, health coaching, and more.
• For more information, please review our Recruitment Policy at Open dfsec.com/recruitment-policy-en