Security Researcher/ Developer, Horizon3

• As a remote first company, we require minimum 25Mbps consumer grade broadband connection
• Software Engineering: Strong understanding of secure software development practices, including experience with version control systems like Git and effective team workflows
• Problem-Solving: Strong analytical skills with an aptitude for solving complex technical problems
• Self-Motivation: The ability to work independently with minimal supervision, demonstrating initiative and a high level of energy
• Collaboration: Work closely with the NodeZero team and N-Day researchers to weaponize reverse-engineered exploits for product integration
• Communication: Strong technical writing and documentation skills, with the ability to convey findings and methodologies to both technical and non-technical stakeholders
• Technical Design: Proficiency in designing, presenting, and evaluating technical solutions, ensuring high-quality software and secure development practices
• Adaptability: Ability to independently learn and adapt to new technologies, tools, and methodologies
• Proficiency in Python: Expert-level proficiency in large-scale Python software development
• Vulnerability Exploitation: In-depth knowledge of common Remote Code Execution (RCE) techniques such as SQL injection, path traversal, and buffer overflow exploits
• Network Protocols: Strong understanding of network protocols and their intricacies, including their role in exploitation vectors
• Database Experience: Experience with relational (Postgres) or graph (Neo4j) database systems
• Minimum of 4 years of experience in Vulnerability Research, Exploit Development, or other deeply technical roles with relevant skill sets
• Bachelor's Degree in Computer Science, Computer Engineering or related field
• Equivalent experience may be considered if demonstrable through proof-of-concept write-ups, published vulnerability research, or similar achievements

Desirable

• The Security Researcher / Developer is responsible for leveraging the latest InfoSec news and swiftly weaponizing newly discovered public vulnerabilities for integration into our product
• You will be involved in tasks ranging from vulnerability research, such as analyzing the web components of popular virtualization technologies, to patch-diffing firmware updates in VPN applications, to full-stack software development aimed at enhancing and extending the capabilities of our core product
• This is a dynamic position that offers the opportunity to work on a wide range of tasks, from building proof-of-concept exploits to advancing our red teaming technologies
• Acquire and configure vulnerable test systems to replicate and validate attack scenarios
• Develop and validate proof-of-concept exploits for identified vulnerabilities and ensure their integration into the core product
• Collaborate closely with engineering teams to enhance product capabilities and develop new features
• Maintain a comprehensive global view of emerging vulnerabilities, ensuring Horizon3 remains current with the latest threat landscape
• Design and implement innovative solutions that advance our autonomous red teaming technologies
• Utilize common Linux command-line tools (e.g., ssh, grep, scp) to support system configuration and exploit testing
• Monitor and analyze public vulnerability databases, forums, and other resources for N-day vulnerabilities