Senior Security Research Engineer, Censys

• Security researchers have a strong technical background and excel at creative problem solving. You rely on your expertise to guide your approach to investigations, including generating your own research ideas
• Thorough understanding of Internet protocols and technologies, not just how they’re used but how they work. This includes fundamentals such as TCP/IP, HTTP, TLS, etc
• High proficiency in using analytical databases and warehouse such as Google BigQuery, Snowflake, etc. to interrogate large datasets
• Ability to conceive, execute, and derive actionable insights from measurements that involve Internet-wide scanning and data collection by using infrastructure to conduct experiments
• Have strong communication skills and can explain complex technical concepts to other engineers, designers, and product managers

Desirable

• This role will help provide the engineering teams with the information needed to provide better coverage, derive deeper insights from our data, and help surface these improvements directly to our customers
• One week you might perform detailed analysis of hosts vulnerable to a particular CVE, and the next week you may be asked to investigate which endpoints we need to scan to improve classification of networking devices. You'll have the opportunity to hunt through the most robust internet-wide scan data available, documenting your findings to share with the broader security community through blogs and talks
• Conduct Internet measurement research using Censys’ Internet-wide scan data; identify and analyze Internet-wide trends with a focus on findings with interesting security implications
• Partner with Research and Product to deliver new security prototypes to customers as well as to guide where we should develop new products
• Inspect, mine, transform, and analyze large datasets to identify patterns and trends to further support engineering efforts such as predictive modeling of scan targets, software and hardware identification, vulnerability detection, threat actor identification, and more
• Work closely with multiple engineering teams to help inform technical decision making in regards to providing better coverage, context, and insights
• Assist in data classification and dataset interrogation using techniques such as entity and identity resolution, cluster, data gap analysis, and others
• As needed, serve as a public face for Censys by sharing knowledge and expertise around how Internet-wide security trends impact our customers across the public and private sectors, as well as the broader global security community
• Other duties as assigned