Manager, Detection & Response
Censys
full-time
Posted on:
Location Type: Remote
Location: Remote • 🇺🇸 United States
Visit company websiteSalary
💰 $140,000 - $205,000 per year
Job Level
SeniorLead
Tech Stack
BigQueryGoPythonSMTP
About the role
- Serve as the cornerstone of Censys' effort to build the most comprehensive understanding of the Internet.
- Lead a team and our strategy to tactically fingerprint software and devices that are susceptible to attack via configuration errors and vulnerabilities as well as roadmap future efforts in active vulnerability testing.
- Research and develop custom fingerprints against Censys scan data to further enrich and contextualize services and infrastructure running on the Internet.
- Consult with the Data engineering team for implementing possible changes to scanning targets, payloads, and collection of data to further increase the fidelity and accuracy of identification of software and hardware versions and models.
- Coordinate with our Go-to-Market and Sales teams to facilitate researching and fingerprinting of emerging vulnerabilities, threats, and high-priority detections.
- Participate in on-call rotations to ensure 24x7 coverage of hi-impact, critical security vulnerabilities
Requirements
- Bachelor's degree in Computer Science, Data Science, Engineering, or other technical discipline (or equivalent professional experience).
- 7+ years of experience in security research/systems security/network security or a similar field.
- 2+ years leading a security engineering function
- Previous experience in Application Security, Penetration Testing, and/or Red Team is preferred.
- Active vulnerability testing experience with frameworks like Nuclei; exploit development experience
- Experience with protocol analysis and in-depth knowledge of common protocols such as TLS, HTTP, SSH, SMB, SMTP
- High-level understanding of common network security vulnerabilities, CVSS scoring and exploit techniques.
- Experience exploring active scan data using tools such as Censys Search, Shodan, or similar; and/or experience with data analysis tools such as Google BigQuery.
- Proficient with regular expressions and other pattern-matching expressions.
- Experience in at least one scripting/programming language with a preference for Go and Python.
- Ability to concisely communicate complex subject matter to technical and non-technical audiences.
- Ability to work independently as a researcher while being part of a larger cross-functional team.
- Operational experience within a Product driven environment that should include GTM involvement.
Benefits
- 401k match
- health
- vision
- dental
- and more!
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
security researchsystems securitynetwork securityApplication SecurityPenetration TestingRed Teamactive vulnerability testingprotocol analysisscriptingprogramming
Soft skills
leadershipcommunicationindependent researchteam collaboration