Vulnerability and Exploitation Researcher

At runZero, we're a team of dreamers and creative thinkers who aren't afraid to shake up the status quo. We're seeking a Vulnerability Researcher to play a critical role in uncovering and analyzing vulnerabilities to strengthen our detection and intelligence capabilities.

Requirements

• Hands-on experience with common vulnerability classes and exploitation techniques
• Familiarity with CVE (Common Vulnerabilities and Exposures), CWE (Common Weakness Enumeration), CVSS (Common Vulnerability Scoring System), EPSS (Exploit Prediction Scoring System).
• Experience using vulnerability and compliance scanning tools (Tenable, Rapid7, Qualys, Rockwell, and many other options)
• Solid grasp of security advisories, vulnerability exploitation, and threat impact
• Experience collaborating with engineers on automated tooling and detection rules
• Familiarity with Git, GitHub, CI/CD processes
• Familiarity with at least one programming language and the ability to use it to automate tasks (e.g. Go, Python, or Ruby)

Benefits

• 100% premium platinum-level medical, vision, dental, life, and short-term disability coverage for you and your dependents
• 401k with 4% company match
• Unlimited PTO
• 11 official company holidays
• Recharge week at the end of the year
• 12 weeks of paid parental leave
• Culture of collaboration with flexible schedules and supportive coworkers