Vulnerability and Exploitation Researcher

At runZero, we're a team of dreamers and creative thinkers who aren't afraid to shake up the status quo. We're seeking a Vulnerability Researcher to play a critical role in uncovering and analyzing vulnerabilities to strengthen our detection and intelligence capabilities.RequirementsHands-on experience with common vulnerability classes and exploitation techniquesFamiliarity with CVE (Common Vulnerabilities and Exposures), CWE (Common Weakness Enumeration), CVSS (Common Vulnerability Scoring System), EPSS (Exploit Prediction Scoring System).Experience using vulnerability and compliance scanning tools (Tenable, Rapid7, Qualys, Rockwell, and many other options)Solid grasp of security advisories, vulnerability exploitation, and threat impactExperience collaborating with engineers on automated tooling and detection rulesFamiliarity with Git, GitHub, CI/CD processesFamiliarity with at least one programming language and the ability to use it to automate tasks (e.g. Go, Python, or Ruby)Benefits100% premium platinum-level medical, vision, dental, life, and short-term disability coverage for you and your dependents401k with 4% company matchUnlimited PTO11 official company holidaysRecharge week at the end of the year12 weeks of paid parental leaveCulture of collaboration with flexible schedules and supportive coworkersOriginally posted on Himalayas