Job description
We are looking to fill the position of a security researcher in our Web team. A person in this role will conduct server-side vulnerability research on Web Applications.
Responsibilities:**
- Help develop and carry out the Web team research strategy by conducting vulnerability research and exploit development on Web Applications.
- Provide unbiased insights and ideas to the web research team.
- Develop proof-of-concept code and exploits.
- Remain on top of various developments related to Web Technologies such as security mitigations, new features, exploitation techniques, etc.
Requirements:**
- Track record of finding impactful server-side vulnerabilities (e.g. Auth Bypass, RCE, User to Admin PE) in Web Applications.
- An understanding of web protocols and web architectures.
- Ability to manually detect and exploit common web vulnerabilities.
- Ability to conduct long-term and widely scoped security research projects as part of a broader team effort.
- Stay up to date with emerging trends of web app security and research methods.
- Exploitation experience is a plus, but not required.
What we offer:**
- Finance:** Highly competitive compensation package with an additional monetary bonus system based on exploitable vulnerability findings.
- Career Development:** Further your career by joining a team of established and experienced security researchers.
- Work Environment:** Fully remote with flexible work schedule.
- Off-topic Research:** We allow researchers, at their discretion, to spend up to 15% of their time conducting research on other topics.
- Wellness:** We offer a prime wellness program designed to promote a healthy lifestyle, which includes, but not limited to access to gyms around the world, health coaching, and more.
For more information, please review our Recruitment Policy at https://dfsec.com/recruitment-policy-en