Experience:

• 5+ years of hands-on experience in Application Security, Vulnerability Research, Penetration Testing, Product Security, or Secure Software Engineering.
• Proven experience in Open Source Software (OSS) Security Assessment and Vulnerability Analysis.

Key Responsibilities

Vulnerability Analysis & Validation

• Analyze and investigate security findings generated by automated vulnerability scanners.
• Differentiate genuine vulnerabilities from false positives, informational findings, and AI-generated hallucinations.
• Perform root cause analysis of identified vulnerabilities.
• Validate exploitability and business impact of reported issues.

Threat Modeling & Security Assessment

• Develop project-level threat models for OSS repositories.
• Identify attack surfaces, trust boundaries, and security risks.
• Evaluate security implications within the broader application ecosystem.
• Apply risk-based security evaluation methodologies.
• Document triage decisions and vulnerability classifications.
• Contribute to the creation of golden datasets for AI model training and benchmarking.
• Provide feedback to improve automated vulnerability detection systems.

Skills

Strong code review and debugging capabilities in:

• C/C++
• Go
• Java
• Python

Additional scripting capability in Bash or equivalent preferred.