Principal Security Researcher (Xpanse)
Core
Lead vulnerability assessment research, develop exploits, and build tooling to shape the future of exposure management and prioritize critical vulnerabilities for customers.
Role type
Principal Security Researcher (Vulnerability Assessment)
Builds
High-impact vulnerability testing tooling, exploit repositories, and tactical response capabilities for the Cortex Exposure Management product.
Domain
Cybersecurity / Vulnerability Management / Offensive Security
Required skills
Vulnerability management, offensive security, security research, TCP/IP and networking protocols, open source security software (Nuclei, OpenVAS, Nmap), cybersecurity frameworks, penetration testing tools, Python, Windows/Linux/macOS/Unix systems, architecture strategy, technical mentorship
Preferred skills
Patch management processes, enterprise/cloud embedded systems, cloud managed services (GCP), network architectures (subnetting, routing, VLANs), distributed data stores (BigQuery, BigTable, PostgreSQL, MySQL), SOC/red/blue team experience
Technologies
Nuclei, OpenVAS, Nmap, Metasploit, Burp Suite, Wireshark, GCP, BigQuery, BigTable, PostgreSQL, MySQL, WSUS, SCCM
Responsibilities
Develop and maintain a comprehensive repository of vulnerability content; Shape and drive tactical response to zero-day and critical vulnerabilities; Conduct research and testing to enhance automation processes; Analyze existing solutions and implement changes; Take part in architecture strategy sessions; Mentor other researchers and ensure high-quality output; Take ownership of projects and support them in production
Seniority
Principal, hands-on IC with mentorship
