Security Researcher (Bot Mitigation)

Requirements

• Deep knowledge of how the internet and web browsers work. Proficient knowledge of JavaScript 
• Understanding of threats, fraud, information security vulnerabilities, and other cyber security-related events 
• Bachelor’s degree and 4-8 years of experience in related fields (i.e. browser security, intelligence analysis, digital forensics, threat hunting, government analysis)  
• Track record of independent, creative problem solving with large amounts of complex data 
• Ability to write high-quality documentation 
• Willingness to give presentations both internally and externally 

Nice to have:

• Skills in developing processes and methodologies for investigations 
• Experience with training teams 
• One or more cyber-related certifications (i.e. CISSP, GCFA, GCFE, Sec+) 
• Python or other coding experience 
• Dynamic or static analysis of software using 3rd party tools 
• Databases  (SQL) experience 

Personal Profile

• You are a curious, persistent person who is always thinking out of the box that wants to apply your knowledge to always do the right thing 
• You are open, transparent, and can work in tight collaboration with anyone 
• You are comfortable communicating in a decentralized work environment and across organizations 

Responsibilities

• Play a lot with the web-browsers, trying to find differences in behavior between them 
• Research and develop signal collection on both mobile and desktop, which enables detection and defense deployments 
• Find ways to detect automation, for example, tools like Selenium, Playwright or Puppeteer 
• Find ways to hide or otherwise game ad placements on the web and mobile environments. 
• Understand customer specific requirements, deliver with impact and exceed customer expectations 
• Share security research topics through research talks, knowledge base and external engagements including media interviews and conference presentations, detailing your discoveries for internal and external sharing 
• Discover adversary tactics, techniques, and procedures leveraged by bots 
• Create and validate data insights to enhance detection excellence 
• Find bad stuff on the internet, see if you can figure out how it is done, document it 
• Red team, experiment, and develop new tactics for various kinds of fraud and to bypass our detection, no need to wait for an attack to be discovered and used by adversaries first 
• Stay abreast of cyber security trends and events related to our mission 
• Contribute high impact work that substantially benefits team level metrics and OKRs 
• Develop techniques, tools, and scripts to simplify yours and others work