Senior Security Researcher

📋 Description Design detection systems for open-source packages at scale Hunt malicious packages, typosquats, and CI/CD abuse patterns Coordinate with maintainers to file CVEs and advisories Build internal tooling using static analysis and AI models Publish research blog posts to share findings Tune detection signals and reduce false positives; counter sandbox evasion 🎯 Requirements 4+ years of security research with CVEs, GHSA, or equivalent advisories Deep expertise in malicious packages, RCE, prototype pollution, SSRF, auth bypasses, CI/CD paths Experience designing and operating detection pipelines at scale Strong programming skills in TypeScript, Python, Go, or Rust Proven track record of technical blog posts and using LLMs as research tools 🎁 Benefits See your impact every day Fast-paced growth environment with learning opportunities Inclusive, welcoming culture Career advancement and exposure to new technologies