Sr Staff PSIRT Engineer

Sr Staff PSIRT Engineer
100% Remote work
PST preferred timezone
(Backfill Position)

Job Responsibilities:

• Technical investigation of reported security vulnerabilities, including reproduction, impact analysis, and severity scoring (CVSS).
• Drive root cause analysis for reported vulnerabilities and partner with product engineering teams to develop and validate remediations.
• Proactively collaborate and ensure alignment with product, engineering, legal, privacy, and threat intelligence teams on vulnerability response strategies.
• Engage with customers and security researchers to discuss vulnerability details, mitigation steps, and disclosure timelines.
• Maintain deep familiarity with industry vulnerability handling standards and organizations such as CNA, NIST, and FIRST.
• Contribute to the continuous improvement of PSIRT workflows, automation, and tooling to simplify and accelerate vulnerability response.
• Perform hotseat duties.
• Draft and publish security advisories.

Requirements:

• Strong expertise in reverse engineering, debugging, and secure software development practices.
• Demonstrated ability to reproduce, analyze, and assess the exploitability of complex vulnerabilities in large-scale systems.
• Deep familiarity with CVSS, CVE, and public vulnerability databases.
• Automation and scripting experience (e.g., Python, Go, Bash, or PowerShell) to develop internal tooling and automate vulnerability triage workflows.

Education:

• BS or MS Degree in Computer Science, Engineering, or Cybersecurity.
• 4+ years of experience in product security, application security, or vulnerability research.

This is a remote position.