22d ago

Security Researcher II (WAF)

India·BangaloreFull-timemid

Security ResearcherCybersecurity

4 views0 saves0 applied

Apply Now

Quick Summary

Overview

Most boards and executives are currently flying blind when it comes to cyber risk. They are guessing. At Safe, we’ve built an AI-driven engine that finally gives the C-Suite a clear, quantified,

Technical Tools

Security ResearcherCybersecurity

Most boards and executives are currently flying blind when it comes to cyber risk. They are guessing. At Safe, we’ve built an AI-driven engine that finally gives the C-Suite a clear, quantified, and real-time view of their security posture. We don’t just provide data; we provide certainty.

We are a $170M Series C-funded category leader. We don’t play in the mid-market; we operate at the highest levels of global enterprise. Today, we are proud to serve 10% of the Fortune 500, protecting global icons such as Apple, Netflix, AT&T, Verizon, and Victoria’s Secret.

As we scale toward our next chapter, we are looking for high-performers who want to do the best work of their careers at the intersection of AI and Cybersecurity.

Safe is not a typical corporate environment. We are a high-intensity, mission-driven team. We value builders who want to define a category and work alongside people who are equally committed to excellence.

Responsibilities

~2 min read

→
Primary role is to work with the Threat Research team focussing on vulnerability research to analyze affected products and trigger conditions for newly released vulnerabilities
→
Utilize vulnerability and exploit intel feeds to identify applicable compensating controls and policies to prevent successful exploitation of these CVEs
→
Research various WAF products to identify APIs that provides details about attack surface protected, policies applied and the enforcement status of these policies
→
Build automation that continuously monitor changes in these policies and APIs of these WAF solutions
→
Setup a lab to apply compensating controls and policies to validate whether that can prevent the exploitation of the CVE in question
→
Map and review auto generated mapping of CVEs to compensating controls and policies which feeds back to our CTEM product

→

M.Tech or B.Tech / B.E. / BCA in Computer Science or Information Technology

→

Must have hands-on experience in working with WAF products (implementation, fine tuning and building automations)

→

Strong understanding of HTTP protocol

→

Proficiency in Python (or a similar language) and experience working with REST APIs.

→

Must have experience in effectively utilizing LLMs for automation engineering and research such as using LLMs to parse advisories, generate mappings, or build agentic workflows

→

Contributions to open source tools or published research is nice-to-have

→

Able to clearly document technical findings for both research team and customer success team

→

Able to work independently with minimum supervision

→

Effective communication, and interpersonal skills

Any of the following certifications would be preferred:

→

If you’re passionate about cyber risk, thrive in a fast-paced environment, and want to be part of a team that’s redefining security, we want to hear from you! 🚀