Sr Staff PSIRT Engineer

Role Overview

This position requires a technical professional for the investigation of reported security vulnerabilities. The role involves conducting impact analysis, severity scoring, and root cause analysis. The ideal candidate will partner with engineering teams to develop remediations and contribute to the continuous improvement of vulnerability response workflows.

Key Responsibilities

• Conduct technical investigations of reported security vulnerabilities, including reproduction, impact analysis, and severity scoring (CVSS).
• Drive root cause analysis for reported vulnerabilities and partner with product engineering teams to develop and validate remediations.
• Collaborate with product, engineering, legal, privacy, and threat intelligence teams on vulnerability response strategies.
• Engage with customers and security researchers to discuss vulnerability details, mitigation steps, and disclosure timelines.
• Maintain familiarity with industry vulnerability handling standards and organizations such as CNA, NIST, and FIRST.
• Contribute to the continuous improvement of PSIRT workflows, automation, and tooling.
• Perform hotseat duties.
• Draft and publish security advisories.

Required Qualifications

• Education: A BS or MS Degree in Computer Science, Engineering, or Cybersecurity is required.
• Experience: 4+ years of experience in product security, application security, or vulnerability research is necessary.
• Technical Skills: Expertise in Product Security, Application Security, Pen Testing, Vulnerability Triaging, and Vulnerability Assessment is required. Proficiency in reverse engineering, debugging, and secure software development practices is also necessary.

Preferred Qualifications

• Automation and scripting experience (e.g., Python, Go, Bash, or PowerShell).
• Familiarity with CVSS, CVE, and public vulnerability databases.
• Ability to assess the exploitability of complex vulnerabilities.

Benefits

• Supplemental benefits including medical, dental, vision, life, disability, and other insurance plans.
• ESPP (employee stock purchase program).
• 401K program (eligible to contribute typically within 30 days of starting, with a company match after 12 months of tenure).
• HSA (Health Savings Account on the HDHP plan).
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On-demand training program, certification prep, and a library of technical and leadership courses/books/seminars (available after 6+ months of tenure).
• Certification discounts and perks for associations including CompTIA and IIBA.
• Dedicated customer service team for Consultants (benefits and resources support).
• Certified Career Coach.