Job Description

Responsibilities:

Technical investigation of reported security vulnerabilities, including reproduction, impact analysis, and severity scoring (CVSS).
Drive root cause analysis for reported vulnerabilities and partner with product engineering teams to develop and validate remediations.
Proactively collaborate and ensure alignment with product, engineering, legal, privacy, and threat intelligence teams on vulnerability response strategies.
Engage with customers and security researchers to discuss vulnerability details, mitigation steps, and disclosure timelines.
Maintain deep familiarity with industry vulnerability handling standards and organizations such as CNA, NIST, and FIRST.
Contribute to the continuous improvement of PSIRT workflows, automation, and tooling to simplify and accelerate vulnerability response.
Perform hotseat duties.
Draft and publish security advisories.

Skills:

Strong expertise in reverse engineering, debugging, and secure software development practices.
Demonstrated ability to reproduce, analyze, and assess the exploitability of complex vulnerabilities in large-scale systems.
Deep familiarity with CVSS, CVE, and public vulnerability databases.
Automation and scripting experience (e.g., Python, Go, Bash, or PowerShell) to develop internal tooling and automate vulnerability triage workflows.

Education

BS or MS Degree in Computer Science, Engineering, or Cybersecurity.
4+ years of experience in product security, application security, or vulnerability research.

Staff PSIRT Engineer

Quick Overview