Responsibilities will include:

On-going research on known and new attack vectors, including identification, with respect to novel attack vectors including their iteration/evolution and related mitigations across browsers and electron-based apps.
Collaborate with Product and Engineering to leverage research findings to evolve Seraphic’s product-line and knowledge base.
Participate in security escalations support. Create security guidance and documentation.
Evaluate & recommend new security technologies and help shape the product going forward with your insights and expertise.
Regular updates to internal teams and customers on research findings.
Active participation in public cybersecurity media/forums/events.

Requirements

3+ years of experience in security research
Experience in vulnerability research with emphasis on JavaScript exploitation, and browser security
Experience with both static and dynamic analysis tools such as WinDBG, IDA, Ghidra, x64Dbg· Experience in enterprise security, in offensive or defensive approaches, hands on experience with attacking or defending enterprise systems.
Knowledge in script writing, programming language (Python, JS, etc).
An innovative mind with keen attention to detail and the ability to set goals and parameters for success, investigate and implement solutions to catch threats according to defined goals.

Preferred Requirements

Writing abilities (Former publications for blogs / comprehensive report writing).
Experience in threat modeling (Attack kill chain, MITRE ATT&CK/D3FEND), identifying security vulnerabilities, common attacker exploit-techniques, and related mitigations and remediations.
Deep knowledge of JavaScript
Experience in web vulnerability research and techniques such as HTML Smuggling, XSS, CSRF, Phishing techniques

Security Researcher – Job Description