Senior Security Researcher
Veracode is seeking a Senior Security Researcher to join its Applied Research Group. This role focuses on enhancing the capabilities and quality of Veracode's Static Application Security Testing (SAST) solutions. The successful candidate will contribute to the company's mission of providing comprehensive application security by conducting original research and developing innovative security measures.
The Senior Security Researcher will be responsible for identifying potential weaknesses and security vulnerabilities in applications developed in languages such as C, C++, and C#. Key tasks include performing binary and source static analysis, reverse-engineering applications, and creating proofs of concept to assist engineering teams in building robust product capabilities. Additionally, the role involves improving automation, accuracy, and efficiency of detection techniques using both proprietary and open-source tools.
Candidates should possess at least two years of practical experience in reverse-engineering or binary static analysis, with familiarity in Abstract Syntax Trees (AST), compilers, and related tooling. A minimum of one year of application security experience, including source code auditing and vulnerability research, is also required. Strong analytical skills, attention to detail, and the ability to work independently on projects are essential. Proficiency in technical writing for a developer audience is highly valued.
Veracode offers outstanding medical, dental, and vision coverage to meet all healthcare needs. The company provides wellness benefits, a flexible "Take What You Need" time-off policy, and extensive development and training opportunities to support career growth. A generous 401(k) match is available to help employees save for the future.
Joining Veracode means becoming part of a community of professionals who take pride in their work every day. The company fosters a collaborative and innovative environment, offering opportunities for professional development and advancement. This role provides a chance to make a significant impact in the field of application security within a leading organization.