Senior/ Lead Security Researcher

About the role

Bamboohr is seeking a highly skilled Senior/Lead Security Researcher to join our dynamic team. In this role, you will be responsible for identifying, analyzing, and mitigating security threats to our innovative solutions. You will work closely with cross-functional teams to enhance our security posture and ensure the integrity of our products. As a leader in the organization, you will also mentor junior researchers and contribute to the strategic direction of our security initiatives.

Key facts

What you'll do

• Conduct in-depth security assessments of Bamboohr's products and services to identify vulnerabilities and recommend appropriate remediation strategies.
• Lead research projects focused on emerging security threats, providing insights that will shape the development of new security features and protocols.
• Collaborate with software engineers and product managers to integrate security best practices into the product development lifecycle.
• Develop and maintain security testing frameworks, tools, and methodologies to ensure comprehensive coverage of security risks.
• Analyze threat intelligence data to stay ahead of potential risks and inform the organization's security strategy.
• Prepare detailed reports and presentations on security findings, communicating risks and recommendations to both technical and non-technical stakeholders.
• Mentor and guide junior security researchers, fostering a culture of continuous learning and improvement within the team.
• Participate in incident response activities, providing expertise during security breaches or vulnerabilities, and leading post-incident reviews to improve processes.
• Engage with the broader security community through conferences, workshops, and publications, representing Bamboohr as a thought leader in security research.
• Collaborate with legal and compliance teams to ensure that security practices align with regulatory requirements and industry standards.
• Develop training materials and conduct workshops to educate employees on security awareness and best practices.
• Continuously evaluate and recommend new security technologies and tools to enhance Bamboohr's security infrastructure.

Requirements

• A minimum of 5 years of experience in security research, vulnerability assessment, or related fields.
• Proven expertise in identifying and mitigating security vulnerabilities in software applications and systems.
• Strong knowledge of security frameworks, standards, and best practices (e.g., OWASP, NIST, ISO 27001).
• Experience with programming languages such as Python, C++, or Java, and familiarity with security tools like Burp Suite, Metasploit, or similar.
• Excellent analytical skills with the ability to think critically and solve complex security problems.
• Strong communication skills, both written and verbal, with the ability to convey technical information to diverse audiences.
• Demonstrated experience in leading security projects and mentoring team members.
• Familiarity with cloud security principles and practices, particularly in environments like AWS, Azure, or Google Cloud.
• Relevant security certifications (e.g., CISSP, CEH, OSCP) are highly desirable.

Nice to have

• Experience with threat modeling and risk assessment methodologies.
• Knowledge of secure coding practices and application security testing.
• Familiarity with incident response frameworks and tools.
• Previous experience in a startup environment or fast-paced tech company.
• Contributions to open-source security projects or publications in security research.

Skills & tools

• Proficient in security assessment tools and methodologies.
• Strong understanding of network security, application security, and cloud security.
• Familiarity with programming and scripting languages for automation and testing.
• Knowledge of security operations and incident response processes.
• Experience with data protection regulations such as GDPR or CCPA.

Practical notes

• This position is fully remote, allowing for flexibility in work location.
• The salary for this role is competitive and commensurate with experience.
• Bamboohr is open to sponsoring work visas for qualified candidates.
• Candidates should be prepared to undergo a background check as part of the hiring process.
• Interested applicants can apply through the Bamboohr careers page at [Bamboohr Careers](https://vkey.bamboohr.com/careers/212).

META

Company: Bamboohr

Title: Senior/ Lead Security Researcher

Listed

location: Unknown

Job type: Full-time