Threat Researcher II (AEV)

Location: New Delhi

Experience: 2 to 4 years

Core Responsibilities:

• Primary role is to work with the Threat Research team focussing on exploit writing and evaluations

• Utilize vulnerability and exploit intel feeds to identify CVEs that may have a working exploit or a PoC available publicly

• Setup an in-house vulnerable lab to try exploit PoC

• Port exploits to frameworks like Metasploit or Nuclei

• Contribute back to the Open Source exploit framework projects with Safe Security as the contributor

• Continuous research on latest security trends and novel attacks based on Threat & Vulnerability feeds

• Proactively collaborate within the Threat Research and the Programme Management team

Essential Skills, Experience and Qualifications:

• M.Tech or B.Tech / B.E. / BCA in Computer Science or Information Technology

• Must have hands-on experience in solving CTF challenges on Hack The Box

• Must be minimum Pro Hacker rank on Hack The Box

• Must have fully solved pro labs on Hack The Box

• Must have experience in effectively utilizing LLMs for vulnerability research

• Hands-on knowledge of port scanners, vulnerability scanners and exploitation framework

• Familiar with MITRE CVE/NVD, CWE, CAPEC, and ATT&CK framework

• Able to work independently with minimum supervision

• Effective communication and interpersonal skills

Any of the following certifications would be preferred:

• OSCP

• CPTS

• CRTO